Why do CIFS share ACLs disappear?
Applies to
- ONTAP 9
- CIFS
Answer
- Permissions on the share and the parent folder:
- if the "Everyone" group has full control permissions, it can overwrite other ACL settings.
- Ensure that the permissions are set correctly and that there are no conflicting settings.
- Remove or adjust any unnecessary or overly permissive permissions, such as the "Everyone" group having full control.
- Restrict permissions to only the necessary user or group accounts.
Additional Information
ACLs (Access Control Lists) on the CIFS share could disappear for other reasons:
- Incorrect inheritance settings:
- Check if there are any inheritance settings on the parent folder or the share itself that might be affecting the ACLs.
- If the ACLs are being inherited from a higher-level folder or share, changes made directly to the CIFS share might be overwritten.
- Review the inheritance settings on the parent folder and the share.
- Ensure that the desired ACLs are applied correctly and that there are no conflicting inheritance settings.
- Consider disabling inheritance if necessary to maintain the desired ACLs on the share.
- Scheduled tasks or scripts:
- It's possible that there might be scheduled tasks or scripts running on the system that are modifying the ACLs on the share.
- These tasks or scripts could be part of the data migration process or other administrative tasks.
- Check for any scheduled tasks or scripts that might be modifying the ACLs on the share.
- Review the scripts or tasks to identify any ACL modification operations.
- Audit and monitoring:
- Enable auditing and monitoring on the share to track any changes to the ACLs.
- This can help identify the source or cause of the ACL modifications.