New Files Permission Issues

[bumbs]

Hi,

hopefully someone can help me out. I have a Duo v2 running 5.3.5 (although the issue was present on 5.3.4)

Any existing shares are fine, but if a new file is added after a short period the file becomes "access denied" when any user tries to access it including the user who created it!
Using the new "reset permissions" from the dashboard solves the issue, but i cant be doing this everytime someone creates a file.

All users have read / write access in the dahboard, and ive tried running all the machines on the same user but it still occurs.
Under Protocol specific in dashboard, Folder/File Creation Group/Everyone Rights - I've set all 4 of these to Read/Write.
Automatic Permissions is also ticked.

Am i missing something? Please please help

[evan]

Please select Automatic Permissions in Protocol-specific setting after you create a new folder.

[bumbs]

Thanks for the reply. Just to clarify I have the automatic permissions set on the top level I.e my share
Are you saying I need to select auto permissions on all sub folders?
Some folders have files which open normal and access denied.
Thanks

[Leia]

Hi bumbs,

You need to know this. When new files and folders are created over SMB, only the shares of "backup" and "media" are default set permission as read/write, other shares are default set as read only for other users except the owner(who created the file or folder). The reason is to protect the files and folders not to be changed or deleted by other people. So if you think it's safe to let everyone touch your files, you can just select the share, goto share access and protocol-specific settings pannel of SMB, and enable "Automatic permissions" and set Folder creation Group/Everyone Rights and Files creation Group/Everyone Rights all to Read/Write.
And about the folders and files that existed in the share, you can select the share and press the "Reset Permission" button.
Hope this is what you want.

Thanks,
-Leia

[bumbs]

Hi leia,

thanks for the reply, maybe i dont explain myself well enough.

I have the protocol specific settings set to read/write and "automatic permissions" activated. I have also used the "reset permission" which solves the problem until new files are added.

The issue the user gets isnt Read Only its "Access Denied" and that includes the creator or "owner" of the file?

any ideas?

[Leia]

Hi bumbs,
I've sent you a PM, please check.
Thanks,
-Leia

[gitbent67]

I am having the exact same issue. Can you share that info, please?

[kraeks]

Leia, wouldn't it be polite to post your messages here instead so others might take part of the knowledge as well?

[Leia]

I just asked something detail in PM. Refer to my earlier post, first, enable "Automatic permissions" and set Folder creation Group/Everyone Rights and Files creation Group/Everyone Rights all to Read/Write. Second, press the "Reset Permission" button.

[bumbs]

For continuation here is my reply to the PM:


Hi Leia,

Its SMB, the access denied is on the file not the folder(s). And yes i have the auto permissions and 4x read/write set.

Here is an example.

If I have issues accessing a file I use the reset permissions and everything is fine. If I add a new file anywhere within the share than this will generally become "access denied" to every user even the owner. Sometimes not straight away there can be a time delay before it is denied.
If I use the reset permissions the "access denied" file then starts to work again. It's almost like the automatic permissions isnt doing what it should.

All users are using mapped drives in windows and can access other files ok when the "access denied" error occurs.

Thanks,

[bumbs]

The issue is beyond what the forum can help with so Leia thinks im best with tech support as they can remote access the box..

Will keep you posted on the outcome.

[gitbent67]

fwiw, I ended up going through WIN 7 and changing the security permissions on the root share folder, and fingers crossed, everything seems to work. I had to change the 'Everyone' group/user to 'full control' under right click>properties>security>advanced>change permissions>advanced settings>edit. I also [checked]the 'include inheritable permissions from this object's parent', and 'replace all child object permissions with inheritable permissions from this object' before applying the changes.
I hope this helps someone.