default ACL is the same as that which would be created by a Microsoft Windows 2003 Server. Therefore, these newcontainers with the default ACL support the following permission types:NOTE: Any user that is part of BUILTIN\Administrators can edit ACLs on CIFS shares. The local DR Series systemadministrator is included in the BUILTIN\Administrators group. To add additional domain groups to the BUILTIN\Administrators group, you can use the Computer Manager tool on a Windows client to connect to the DR Seriessystem as Domain administrator and add any groups you want. This capability allows users other than the Domainadministrator to modify an ACL as needed.• BUILTIN\Administrators:– Allows: full access, object inherit, and container inherit.– Applies to: this folder, subfolders, and files.• CREATOR OWNER:– Allows: full access, inherit only, object inherit, and container inherit.– Applies to: subfolders and files only.• EVERYONE:– Allows: traverse folders, execute files, list folders, read data, read attributes, and read extendedattributes.– Applies to: this folder only.• NT AUTHORITY\SYSTEM:– Allows: full access, object inherit, and container inherit.– Applies to: this folder, subfolders, and files.• BUILTIN\Users:– Allows: create folders and append data, inherit-only, and container inherit.– Applies to: this folder, subfolders, and files.• BUILTIN\Users:– Allows: read and execute, and container inherit.– Applies to: this folder, subfolders, and files.• BUILTIN\Users:– Allows: create files and write data, object inherit, and container inherit.– Applies to: subfolders only.NOTE: If these permissions are unsuitable for your needs, you can modify the default ACL to suit your ownrequirement using the Windows ACL Editor (for example, using Properties → Security from Windows Explorer).NOTE: Beginning with the 1.1 release, the system does not understand the Owner Rights permission and sets theowner of new files/folders created by the Domain Administrators as DOM\Administrator rather than as BUILTIN\Administrators.Existing Containers (Pre–1.1 Release)Starting with Release 1.1, the DR Series system software supports the use of access control lists (ACLs) for CIFS andshare-level permissions. An ACL is a list of permissions that can be associated with any resource. Each ACL can containaccess control entries (ACEs) that define or describe the permissions for an individual user or a group of users. An ACLcan consist of zero (all access) or a number of ACEs that define specific permissions on an per-user or per-group basis.21
