Windows ACL:
I just started a NAS project at work and got a Synology Rack Station RS810RP+. It is good for an enterprise environment because it has redundant power and Ethernet along with RAID protection. Being in a domain environment is a perfect setting to test the new Windows ACL feature. However I did run into a major issue with Windows ACL which I will explain.
Below you can see two of the permission steps when creating a new shared folder. The below left image shows the basic settings of the shared folder. In the below right image you see the Windows ACL settings. With DSM 3.0 Beta, this is a one time only tab. If you mess up the ACL permissions, you will need to delete and re-create the shared folder.
After setting the Everyone group to Full Control in the Windows ACL tab, the image below is the result when looking at the share in Windows Explorer. Everyone is allowed to make full modifications to permissions.
Here is the issue I have with Windows ACL:
Create a new shared folder and set Windows ACL for Everyone to be read only. Since nobody has Full Control over the share, you cannot set/change permissions.
Here is the error message. Access to change permissions is denied.
The admin would need to have full control over the shared folder. The final version of DSM 3.0 should allow the Windows ACL tab to be available after the initial Shared Folder creation.
I see two options to resolve this issue:
» Default the admin user (Domain Admins on Domain environments) to have Full Control
permissions in Windows ACL on all Shares.
» Make a separate drop down in the Windows ACL tab for admin user/groups
(instead of just the Everyone group)
Hopefully this is issue will be fixed on the production ready DSM 3.0. If this is the way the Windows ACL works in the production version of DSM 3.0, it is a lackluster implementation of a key new feature of DSM 3.0.
From the webinar Q&A:
Q: Does new ACL support work on existing volume?
A: ACL Support is only available on EXT4 volumes.
Q: Does the DSM3.0 supports converting existing ext3 partition to ext4?
A: DSM 3.0 does not feature a tool which will convert an existing volume into ext4 â€" while there are experimental technologies out there which claim this ability â€" they are still experimental and cannot be used in a production environment.
