CONTAP-661231: [RFE]: show-effective-permissions command doesn't show sticky bits on the parent folder
Issue
- User has UNIX permissions enabled
- End user tried to delete files via SMB with no success
- User has not sufficient permissions, but the ONTAP command "vserver security file-directory show-effective-permissions" incorrectly claims that the user has permissions to delete the file:
vserver security file-directory show-effective-permissions -vserver svm1 -win-user-name XXX -path "/samba/YYY/ZZZ.xls"
Vserver: svm1
Windows User Name: XXX
Unix User Name: XXX
File Path: /samba/YYY/ZZZ.xls
CIFS Share Path: -
Effective Permissions:
Effective File or Directory Permission: 0x1301ff
Read
Write
Append
Read EA
Write EA
Execute
Delete Child
Read Attributes
Write Attributes
Delete
Read Control
Synchronize
Note the "Delete" above.
- Then when you look at the permissions more closely:
vserver security file-directory show -vserver svm1 -path "/samba/YYY/ZZZ.xls"
Vserver: svm1
Dummy index for tree walk: -
File Path: /samba/YYY/ZZZ.xls
File Inode Number: 94341
Security Style: unix
Effective Style: unix
DOS Attributes: 20
DOS Attributes in Text: {-}
--A--{-}-Expanded Dos Attributes: -
UNIX User Id: NNN
UNIX Group Id: 101
UNIX Mode Bits: 760
UNIX Mode Bits in Text: rwxrw----
ACLs: -
vserver security file-directory show -vserver svm1 -path "/samba/YYY"
Vserver: svm1
Dummy index for tree walk: -
File Path: /samba/YYY
File Inode Number: 49348
Security Style: unix
Effective Style: unix
DOS Attributes: 10
DOS Attributes in Text: -{-}
--D--{-}Expanded Dos Attributes: -
UNIX User Id: NNN
UNIX Group Id: 101
UNIX Mode Bits: 1770
UNIX Mode Bits in Text: rwxrwx--T
ACLs: -