File Sharing permissions problems, PLEASE HELP!

Hi all,


I'm a creative manager at a design agency where we currently have a server setup for internal file sharing with 10 users all connected to it, creating/accessing/modifying/saving files on a daily basis. I'm no tech support specialist so my knowledge is limited.


THE PROBLEM: Multiple users are experiencing permissions conflicts preventing a user from opening/modifying a file that resides on the server. A problem file may show a red 'no entry' icon to one user as one example of one of the permissions problems we are facing.


THE SETUP: A Mac Mini (2018) with a 6TB External Hard Drive attached. On this external hard drive is where our files live in a Shared Folder named MacMiniFiles. This is hooked up to an ethernet network that all user's iMac workstations are connected to. All users and the Mac Mini are running Catalina.


HOW USERS ARE CONNECTED: Multiple users are connected to the MacMiniFiles folder on the Ext Hard Drive via ethernet connection using SMB protocol through 'Connect to Server' using Apple's File Sharing facility. Users access the MacMiniFiles folder daily to create, access, modify and save files. Each user has their own Mac User account that exists on both their local iMac workstation and the Mac Mini. All users are added to the Sharing & Permissions of the MacMiniFiles Shared Folder with Read & Write privileges with those settings applied to enclosed items.


I've been in touch with Apple Support about this issue and they've tried various things to no avail. I've been told there is no fix and I would have to change the server setup entirely to something non Apple i.e. Synology NAS or something similar.


However, there's one setting I haven't tried and I'm wondering if this may solve the permissions problems across the board. It's a setting at the bottom of the Ext Hard Drive Volume Info panel called 'Ignore ownership on this volume' (see screenshot attached highlighted in pink).



I've trawled the internet for info on this setting as Apple Support advised against using it but from what I can find about what the setting does, it sounds like it could be the solution to the permissions problems and is safe to use on volumes that aren't running an OS or applications (which this Volume does neither, it's purely a file/data drive).


THE QUESTION: Will the 'Ignore ownership on this volume' setting solve the issues me and my fellow users are experiencing and if I turn the setting on, will it cause any adverse/irreversible effects to the files within the MacMiniFiles folder that resides on the volume?


Any other advice on how I can resolve this issue would be hugely appreciated as I'm going nuts trying to solve this issue that users are being frustrated by on a daily basis.


If it can't be resolved, any advice on a best file sharing server setup would be massively appreciated as we are open to replacing ur setup entirely for a faster setup with no problems!


Many thanks in advance.


James

Posted on Sep 4, 2020 5:00 AM

Reply
Question marked as Top-ranking reply

Posted on Sep 7, 2020 5:55 AM

It sounds like you are experiencing the ACL bug that Apple seems intent on not correcting. Basically, when you use Sharing to define the permissions, you are setting users to read/write. But you are not getting directory and file inheritance. Also, if you are adding users to the sharing pane, you are making things more difficult as you really want to put those users in a group and then add the group to the shared folder. By using a group, then all members of the group will share the assigned permissions.


To resolve, I suggest that you;


• Create a group

• Place your users in the group

• Assign the group to the permissions of the share

• Correct the ACL by adding the directory and file inherit flags

• Propagate the permissions


Now, this is needed if you are trying to control individual users and if you have complex sharing needs (for example, not all users should have access to all data). Ah, but, if everyone has access to everything, then you might want to consider forgetting about ACLs and permissions and simple opt for the ignore permissions route.


See here for details and a recommended solution:

https://discussions.apple.com/thread/250537136


Hope this is helpful,


Reid

Similar questions

3 replies
Question marked as Top-ranking reply

Sep 7, 2020 5:55 AM in response to Jamesm360

It sounds like you are experiencing the ACL bug that Apple seems intent on not correcting. Basically, when you use Sharing to define the permissions, you are setting users to read/write. But you are not getting directory and file inheritance. Also, if you are adding users to the sharing pane, you are making things more difficult as you really want to put those users in a group and then add the group to the shared folder. By using a group, then all members of the group will share the assigned permissions.


To resolve, I suggest that you;


• Create a group

• Place your users in the group

• Assign the group to the permissions of the share

• Correct the ACL by adding the directory and file inherit flags

• Propagate the permissions


Now, this is needed if you are trying to control individual users and if you have complex sharing needs (for example, not all users should have access to all data). Ah, but, if everyone has access to everything, then you might want to consider forgetting about ACLs and permissions and simple opt for the ignore permissions route.


See here for details and a recommended solution:

https://discussions.apple.com/thread/250537136


Hope this is helpful,


Reid

Sep 7, 2020 6:22 AM in response to Jamesm360

As they say, one way to find out. Check the box and reboot the server. At that point, permissions on the volume is ignored and all users have equal access.


And yes, the ACL fix is daunting for some users.


The worst outcome is that ignore permissions does not work as desired. If so, uncheck the box and reboot again. Then focus on properly applying the ACL permissions.


Hope this is helpful,


Reid

Sep 7, 2020 6:15 AM in response to Strontium90

Hi Reid,


Thanks so much for your reply.


There aren't any complex sharing needs, everyone has access to all files that reside on the server.


So with that in mind, would the Ignore ownership on this volume setting solve all the permissions issues we are experiencing and could it potentially have any negative effects by being turned on?


I'm happy to attempt your fix using the steps you've provided in your linked post if you think it's the better approach to solving the issues? However I have no knowledge about what I'd be doing so I'd be following your steps blindly as it were.


Thanks


James

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

File Sharing permissions problems, PLEASE HELP!

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.