Why can the admin account still access subfolders within a shared folder using SMB or AFP, even though folder permissions are set to deny admin access?
Last modified date:
2017-03-20
Applied Models:
Answer:
After enabling advanced folder permissions at “Control Panel” > “Privilege” > ”Shared Folders” > ”Advanced Permissions” > ”Enable Advanced Folder Permissions”, user access and deny permissions can be set individually for folders and subfolders. However, folders with “admin” > “deny access” permissions can still be accessed by the admin account if they are inside a shared folder, and admin has permission to connect to that shared folder using SMB or AFP.
This happens because when connecting with SMB or AFP, the admin account is only affected by the root level shared folder permissions. When the admin account has read/write permissions for a shared folder, subfolder permissions are ignored.
