Bug 1319 - Cannot write to a share with write-list users
Summary: Cannot write to a share with write-list users
Status: RESOLVED DUPLICATE of bug 1254
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: Config Files (show other bugs)
Version: 3.0.3
Hardware: All other
: P3 normal
Target Milestone: none
Assignee: Gerald (Jerry) Carter (dead mail address)
QA Contact:
URL:
Keywords:
: 1369 (view as bug list)
Depends on: 1254
Blocks:
  Show dependency treegraph
 
Reported: 2004-05-04 04:25 UTC by Marcel Verberg
Modified: 2005-02-11 07:47 UTC (History)
7 users (show)

See Also:


Attachments
Patch for this in modes better than security=share. (1.14 KB, patch)
2004-05-17 17:15 UTC, Jeremy Allison
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Marcel Verberg 2004-05-04 04:25:57 UTC
When creating a share who can be read by users in the 'valid users' en can be 
writable by users in the 'write list', any write access from the windows 
workstation has been denied !
I tried with different settings (see settings below), but nothing works!

Please send help!
Greetz, Marcel

[test1]
path=/home/test
write list = marcel
valid users = @users
force user = root

[test1]
path=/home/test
read only = yes
write list = marcel
valid users = @users
force user = root

[test1]
path=/home/test
writable = no
write list = marcel
valid users = @users
force user = root
Comment 1 Gerald (Jerry) Carter (dead mail address) 2004-05-14 13:17:59 UTC
do you have security = share by chance ?
Comment 2 Gerald (Jerry) Carter (dead mail address) 2004-05-17 10:13:54 UTC
The problem seems to be that change_to_user() does not
call check_user_ok() -> is_share_read_only_for_user()
when 'force user' is set.
Comment 3 Jeremy Allison 2004-05-17 16:33:24 UTC
Ok, I'm assuming the semantics required here are :

validate user can read or write.
Then change to forced user/forced group and that user or group retains the
read or write access that the original accessing user had.
This only really makes sense in modes better than security=share I think.
Please comment if this understanding is incorrect.
Jeremy.
Comment 4 Jeremy Allison 2004-05-17 17:15:28 UTC
Created attachment 516 [details]
Patch for this in modes better than security=share.

Patch for this in modes better than security=share.
Jeremy.
Comment 5 Gerald (Jerry) Carter (dead mail address) 2004-05-21 11:21:57 UTC
*** Bug 1369 has been marked as a duplicate of this bug. ***
Comment 6 Gerald (Jerry) Carter (dead mail address) 2004-05-24 07:58:52 UTC
closing as fixed
Comment 7 Richard Hoyle 2004-06-15 03:08:26 UTC
Hi,

With a share such as that below, this bug is still evident.

I patched 3.0.4 source with the patch at:

http://samba.org/~jerry/patches/post-3.0.4/samba-3.0.4.patch

and the share is still not writable (as it was in 2.x.x) by
members of the specs group.

I have quite a bit of 'log level = 10' log file I could post if it
might help.  Let me know the bits you want.

Many thanks for Samba and for releasing it under the GPL.

Regards,

===Rich

[Specs]
comment = Specifications
valid users = rah ian anne vamp jim ann indra temps ocr sue node14 
path = /home/Specifications
write list = @specs
force group = specs
public = yes
guest ok = yes
force create mode = 775
read only = true
force directory mode = 775
hide dot files = yes
Comment 8 Gerald (Jerry) Carter (dead mail address) 2004-06-15 05:32:36 UTC
reopening for new report.
Comment 9 Gerald (Jerry) Carter (dead mail address) 2005-02-11 07:47:51 UTC

*** This bug has been marked as a duplicate of 1254 ***