How to Configure User Permission Settings of Shared Folders When a Conflict Occurs in QTS?
Applicable Products
QTS
Scenario
QTS does not directly support assigning read-only access to a shared folder while allowing read/write access to its subfolders via the standard privilege settings. However, this configuration is achievable through two alternative methods.
Solution
Method 1: NAS POSIX Permissions
This method is suitable for simple permission control within the QTS interface.
1. Go to Control Panel > Privilege > Share Folders > Advanced Permissions > Enable "Enable Advanced Folder Permissions" and Apply
2. Select the target shared folder and click "Edit Shared Folder Permission".
3. Assign Read/Write permissions to the user.
4. Check the box "Only allows users in the administrator group to write files and folders"
5. Apply
For permission structures conflicts deeper than two levels (e.g., three-tier folders), we recommend using Windows ACL.
Method 2: Use Windows ACL to Set Permissions
This method offers more granular control and is suitable when using a Windows environment.
1. Go to Control Panel > Privilege Settings > Shared Folders > Advanced Permissions > Enable Windows ACL support
2. Assign Read/Write permissions to the NAS administrator or domain administrator for the root shared folder.
3. On a Windows computer:
3.1 Map the shared folder as a network drive using the NAS administrator or domain admin.
3.2 Right-click the shared folder > Properties > Security.
3.3 Click Edit > Add, and enter the user account to configure.
3.4 "Show advanced permissions" and configure the user’s permissions at the root (shared folder) level to Read-only:
3.4.1 Allow:Traverse folder / execute file, List folder / read data, Read attributes, Read extended attributes, Read permissions
3.4.2 Deny: Create files/write data, Create folders/append data, Delete subfolders and files or Delete.
3.5 Navigate to the subfolder.
3.6 Configure the same user’s permissions
3.6.1 Leave these two unchecked: Change permissions, Take ownership
3.6.2 Check all other advanced permission.
Further Reading
How to Configure User Permission Settings of Shared Folders When a Conflict Occurs in QuTS hero
Should I enable Advanced Folder Permissions or Windows ACL support?
Why are Windows ACL settings for a subfolder sometimes not saved?
