User is unable to access CIFS share due to insufficient file-level permissions
Applies to
- ONTAP 9
- CIFS
- NTFS
Issue
- User tries to access CIFS share:
Access Denied - Share-level permission to access the share is sufficient:
Example:
::> cifs share show -share-name vol Vserver Share Path Properties Comment ACL
-------------- ------------- ------------- ---------- -------- -----------
svm1 vol /vol oplocks - user1 / Full Control
browsable
changenotify
show-previous-versions- File-level permissions indicate
user1is not listed in DACL:
Example:
::> file-directory show -vserver svm1 -path /vol
Vserver: svm1
File Path: /vol
File Inode Number: 64
Security Style: ntfs
Effective Style: ntfs
DOS Attributes: 10
DOS Attributes in Text: ----D---
Expanded Dos Attributes: -
UNIX User Id: 0
UNIX Group Id: 0
UNIX Mode Bits: 777
UNIX Mode Bits in Text: rwxrwxrwx
ACLs: NTFS Security Descriptor
Control:0x8004
Owner:BUILTIN\Administrators
Group:BUILTIN\Administrators
DACL - ACEs
ALLOW-User2-0x1f01ff
- Security trace may show errors such as:
Access is denied. The requested permissions are not granted by the ACE
Access is denied by an explicit ACE
Access is denied by an inherited ACE
