Windows permissions guidelines, Rapid nfs and rapid cifs – Dell PowerVault DR6000 User Manual
Page 24
•
Group (group in which the owner belongs)
•
Other (other users with an account on the system)
Each of these three user types support the following access permissions:
•
Read (read access that allows user to read files)
•
Write (write access that allows user to create or write to a file)
•
Execute (access that allows user to execute files or traverse directories in the filesystem)
NOTE: A root user has all levels of permission access, and a user can be a member of a single group or of multiple
groups (up to 32 groups are allowed in Unix).
Windows Permissions Guidelines
To enable Windows access, the DR Series system supports access control lists (ACLs) that contain zero or more access
control entries (ACEs), and an empty ACE list grants all access requests. The Windows New Technology File System
(NTFS) uses ACLs as part of the security descriptor (SD) process, which requires permissions to access such filesystem
objects as files and directories. ACLs support two levels of users:
•
Owners
•
Groups
Both Owners and Groups have Security IDs (SIDs) that define and identify an object owner or the group owning an
object. ACEs in an ACL consist of a SID, a specific permission that either allows or denies access and also defines
which of the following inheritance settings apply:
•
IO—inherit-only: not used for access checking.
•
OI—object inherit: new files get this ACE added.
•
CI—container inherit: new directories get this ACE added.
Windows NTFS ACLs include the following read, write, append, execute, and delete permissions that allow users to:
•
Synchronize access
•
Read data or list the directory
•
Write data or add a file
•
Append data or add a folder
•
Read Extended Attributes (EAs)
•
Write EAs
•
Execute file or traverse folders
•
Delete child or delete folders
•
Delete a file
The Owner user type has two default permissions:
•
Write discretionary ACL
•
Read control
Rapid NFS and Rapid CIFS
Rapid NFS and Rapid CIFS enable write operation acceleration on clients that use DR replication and NFS or CIFS file
system protocols. Similar to OST and RDS, these accelerators allow for better coordination and integration between DR
Series system backup, restore, and optimized deduplication operations with Data Management Applications (DMAs)
24