FTP Security Problem

[gbunk]

I am now setting up / tweaking our new ReadyNAS Pro 4 which is running RAIDiator 4.2.20 and setup in "User Mode" but with Guest Access to all shares due to not being ready to setup User/Pswd & groups. We migrated over from an NV running in "Share mode".

I am now trying to setup two FTP accessible folders for outside clients to access for transferring files: 1) a "general" FTP folder with a generic user & password given to any client who needs access and 2) a "secure" FTP folder for one particular client which requires us to restrict access from any other client (i.e. restrict the general FTP users from accessing).

The unit has been setup with FTP protocol setup as follows:
Port: 21
Authentication Mode: User
Allow Upload Resumes: Enabled
Passive Ports: 1024-65535
Masquerade as: "Hostname"

I then setup two users with user accounts and passwords strictly for the two FTP folders access. The share folder owner & group for each FTP folder is set to "root" (this needed done due to failing FTP transfers) with "Read/Write" access given to "Everyone" for the Share Folder Rights (Advanced Options). The FTP tab on the share is setup as "Disabled" with "Write Enabled Users" set for the appropriate FTP user (the general on the general folder and the secure one on the secure folder). The CIFS tab is set for "Read/Write" and "Allow Guest Access" checked.

The access control works great with the exception that the general FTP user can see the "-snap" folder of the secure FTP user! I can't have this! I thought I remember seeing that a firmware update some time ago had stated that "Snapshots now retain the permission settings of the original folders"?

Am I missing something? If this is just the way it works, how are others working around this? Seems my two solutions are to turn off snapshots (which I don't really want to do - we use them as a nightly backup) or create a scheduled task on a PC which would move the secure FTP folders contents to another folder prior to the snapshot being taken. Wish I could just turn off snapshots for these FTP folders.

Thanks!
-Garry