Existing Containers (Pre-1.1 Release) - Dell PowerVault Storage Area Network Administrator's Manual

default ACL is the same as that which would be created by a Microsoft Windows 2003 Server. Therefore, these new
containers with the default ACL support the following permission types:
NOTE: Any user that is part of BUILTIN\Administrators can edit ACLs on CIFS shares. The local DR Series system
administrator is included in the BUILTIN\Administrators group. To add additional domain groups to the BUILTIN
\Administrators group, you can use the Computer Manager tool on a Windows client to connect to the DR Series
system as Domain administrator and add any groups you want. This capability allows users other than the Domain
administrator to modify an ACL as needed.
• BUILTIN\Administrators:
– Allows: full access, object inherit, and container inherit.
– Applies to: this folder, subfolders, and files.
• CREATOR OWNER:
– Allows: full access, inherit only, object inherit, and container inherit.
– Applies to: subfolders and files only.
• EVERYONE:
– Allows: traverse folders, execute files, list folders, read data, read attributes, and read extended
attributes.
– Applies to: this folder only.
• NT AUTHORITY\SYSTEM:
– Allows: full access, object inherit, and container inherit.
– Applies to: this folder, subfolders, and files.
• BUILTIN\Users:
– Allows: create folders and append data, inherit-only, and container inherit.
– Applies to: this folder, subfolders, and files.
• BUILTIN\Users:
– Allows: read and execute, and container inherit.
– Applies to: this folder, subfolders, and files.
• BUILTIN\Users:
– Allows: create files and write data, object inherit, and container inherit.
– Applies to: subfolders only.
NOTE: If these permissions are unsuitable for your needs, you can modify the default ACL to suit your own
requirement using the Windows ACL Editor (for example, using Properties → Security from Windows Explorer).
NOTE: Beginning with the 1.1 release, the system does not understand the Owner Rights permission and sets the
owner of new files/folders created by the Domain Administrators as DOM\Administrator rather than as BUILTIN
\Administrators.
Existing Containers (Pre–1.1 Release)
Starting with Release 1.1, the DR Series system software supports the use of access control lists (ACLs) for CIFS and
share-level permissions. An ACL is a list of permissions that can be associated with any resource. Each ACL can contain
access control entries (ACEs) that define or describe the permissions for an individual user or a group of users. An ACL
can consist of zero (all access) or a number of ACEs that define specific permissions on an per-user or per-group basis.
21