Per User Permissions Arch Linux

[archiso]

I have setup a home NAS using Samba and want to know if I can have per user permissions for the files in the folder. I'm using Arch Linux and the drive for the NAS is formatted with ext4.

[Kilrah]

Sure, filesystem permissions are still valid beneath samba.

If you give 2 users access to the samba share, but one of those doesn't have the permissions to the underlying files/folders they won't be able to access them. 

[archiso]

1 minute ago, Kilrah said:

Sure, filesystem permissions are still valid beneath samba.

If you give 2 users access to the samba share, but one of those doesn't have the permissions to the underlying files/folders they won't be able to access them. 

How can you give users different permissions?

[Kilrah]

With chown/chmod, and as usual you're limited to working with groups when you want to give different permission sets.

 

You can set the owner of a folder/file to be a given group, and whoever needs to be able to access that is added to the group.

[archiso]

Just now, Kilrah said:

With chown/chmod, and as usual you're limited to working with groups when you want to give different permission sets.

 

You can set the owner of a folder/file to be a given group, and whoever needs to be able to access that is added to the group.

Oh yeah.

I forgot about setting the owner of a file... 

[archiso]

@KilrahOne more thing , can I have it so that files that a user doesn't have write perms to they can't see it, right now one user has no perms to a dir but they can see it in the dir tree.

[Kilrah]

If a directory doesn't have the execute perm for the user then they can't list it, but AFAIK you can't hide specific files in a directory a user can list or the existence of the directory itself at the parent level. 

[archiso]

28 minutes ago, Kilrah said:

If a directory doesn't have the execute perm for the user then they can't list it, but AFAIK you can't hide specific files in a directory a user can list or the existence of the directory itself at the parent level. 

ok. It's just that when I was using truenas dirs without read perms were not seen in the dir list.

[Kilrah]

It's very likely you can configure samba to do it at this level but that goes beyond my knowledge about it, best to check the doc. Seems ACLs might help.