Verify Access Control Lists on a Macintosh system
If you are using Access Control Lists on Macintosh OS X and the Windows operating system, use this task to verify.
-
Test permissions on the
K2 system as follows. For K2 SAN access, test permissions on the primary K2
Media Server FSM. For stand-alone K2 storage access, test permissions on the
stand-alone K2 system.
- Create a new text file on the V: drive.
- Right-click on the text file and select Properties.
- Click the Permissions tab.
- Select Everyone and then for the Write permission select the Deny check box.
- Create a folder on the V: drive.
- Give full permissions to the first user (designated in this procedure as userA) on the domain.
- Give read only permissions to the second user (designated in this procedure as userB) on the domain.
-
On the Macintosh system,
do the following:
- Login as userA.
- Right-click on the text file and select Properties.
-
Open up
Terminal and change
directory to the volume.
If the SNFS file
system is named "default" type the following and press
Enter:
cd /Volumes/default
If the SNFS file system is named "gvfs_hostname" (where hostname is the name of the K2 system) type the following and press Enter:cd /Volumes/gvfs_hostname
-
Type the following
command:
ls –le
- Verify that there is a "+" next the text file, plus a list of permissions below. If this is true then cross-platform ACLs are enabled.
- Open the Finder, go to the default volume and try to edit the text file. This should fail as the file should not be writeable.
- In the Finder, go to the folder you created earlier in this procedure and create a text file in the folder. This operation should be successful.
- Log out and then log back in as userB.
- In the Finder, go to the folder you created earlier in this procedure and try to create a text file in the folder. This operation should fail.