ACLs and Sharing
summary
Assumes an environment with LDAP/AD plus lifecycle tooling and Nextcloud using the external storage interface to expose NAS data and aims to make permissions transparent across protocols. Compares ACL styles and finds NTFS and NFSv4 ACLs nearly identical, with inheritance and 14 granular ACEs that administrators typically project down to three effective rights (read write control). Recommends sticking to allow ACEs, mapping ACL entries to Nextcloud CRUDS, and harmonizing via directory attributes for predictable new-object permissions.
AI-written summary · about
chapters (4)
- 0:00Start
- 0:47Assumptions or Constraints
- 1:51File System Permissions Overview
- 4:37How about a compromise?
related talks
06mCloud Federation: Beyond Simple File Sharing
29mUser Management in
32m"Our quest for ACL improvements in TYPO3 Core"
36mNetwork-independent ACLs: Why Security Shouldn't Depend on Your Network
05mACLs in REST APIs
20mBuilding Scalable Access Control Frameworks in React
35mGiving Private Clouds Public Capabilities
25mSecurity Architecture