Lesson 14: Understanding File Access Flashcards
Use the Server app to configure shared folders; Understand the POSIX ownership and permissions model; Understand access control lists (ACLs) and access control entries (ACEs); Configure OS X Server to control access to files based on user and group accounts, standard POSIX permissions, and ACLs
When does an ACE for a folder’s ACL get propagated to items in the folder?
An ACE of a folder’s ACL is propagated to a new item that is created in that folder, or copied into that folder from another volume, if the inheritance options for the ACE apply. Also, an administrator can select a folder in the Storage pane of the Server app, choose Propagate Permissions from the Action (gear icon) pop-up menu, select the Access Control List checkbox, and click OK. Finally, if you use the File Sharing pane to modify an ACL that has been inherited, the changes will be propagated.
What permissions can you choose for an ACE in the File Sharing pane of the Server app?
In the File Sharing pane of the Server app, when you edit an ACE, you can choose Read & Write, Read, or Write.
What permissions can you specify for an ACE in the permissions sheet of the Storage pane of the Server app?
In the Storage pane of the Server app, when you edit an ACE, you can select checkboxes for 13 kinds of permissions. The categories include Administration, Read, and Write.
In the permissions sheet of the Storage pane in the Server app, what four rules for inheritance can you apply to an ACE?
Apply to this folder; Apply to child folders; Apply to child files; and Apply to all descendants.
How do you remove an inherited ACE?
In the Storage pane of the Server app, navigate to the item that has an ACL, click the Action (gear icon) pop-up menu, choose Edit Permissions, click the Action (gear icon) pop-up menu, and choose Remove Inherited Entries.
What might it mean if you see a GUID rather than a user name in an ACL?
If you see a GUID instead of a user name in an ACL, it could mean that you removed a user or a group from your server, and the ACE is displaying that user or group’s GUID because it cannot map the GUID to a user or a group.
