![]() However, when the backup share is viewed by an end user, say basil, only the directory Basil, its subdirectories and files contained within will be visible. System administrators still have full visibility of all directories in the backup share. Repeat step 5B for each top-level user directory in the backup share. Once complete, you will be returned to the Properties dialogue box. Highlight the freenas entry and click Remove.Ĭlick OK to allow security information to be propagated through the directory tree. You will be returned to the previous screen. The dialogue box below appears.Ĭlick on Convert inherited permissions into explicit permissions on this object. Next, click the Disable inheritance button. When permission propagation is complete, click the Advanced button. Use the Edit button to add user basil with read access.Īttempting to remove freenas throws up the following error:Įxit this screen and then click OK to allow permissions for basil to propagate through the directory tree. To achieve this, it’s necessary to remove read access to that directory for other users by removing the group freenas and granting basil read access. This has to be altered so that only user basil should be able to view backed up data in directory B asil. Notice that permissions have been inherited from the share. Selective backups of devices that each user owns will be kept in the relevant user directory.ĭirectory permissions are now adjusted so that the end users can read their own data. In the example below, directories have been set up for each user in the backup share. Also, allow system administrators to have full access to the share. Step 5B: Give end users read access to their own data within the backup share.Īdjust share permissions such that only FreeNAS users (in this case belonging to the group freenas) have read access to the backup share. Step 5A: Adjust permissions on the backup share. To achieve the desired goal, step 5 in the original post is replaced with the following steps: Resilio Sync is the owner of the backup repository.System administrators have full access to the backup repository.End users may read their own data in the backup repository, but not modify or delete it.End users should only be able to see their own data.The key is to set up permissions for the backup repository such that the following objectives are met: The result is that end users will be able to restore their own data without referring to a higher authority. There is a little extra work that the system administrator will have to do to set this up, but the longer term benefits are substantial. ![]() ![]() Is it possible to get rid of the middle man and have end users responsible for recovering their own data? It certainly is! In a recently updated post on setting up Resilio Sync on FreeNAS, a third party was responsible for recovering end user data. For an earlier Windows 7 version of this post refer here. The steps in this post are executed from a Windows 10 PC.The reader has been redirected here from this post.This post may be of interest if you want to give end users the ability to recover lost files by giving them read access to their own backed up data. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |