Controlling access

Each share has an associated list of access rights. A particular access right describes:

• A UNIX username and group (after taking username mappings into account) for whom this access right applies.

• Whether this right applies if the user is authenticated -- supplies a valid password for accessing the VisionFS server, according to the current authentication method.

• Whether this right applies if the user is a guest -- doesn't have a password for accessing the server, for the current authentication method.

• The actions this user is allowed to perform in the share.

• The UNIX username and group to use when performing the allowed actions.

Set up the access rights for a share using the Access tab of the share's properties.

The access rights determine whether or not VisionFS tries to perform an action in a share. If a particular action is allowed, it doesn't necessarily mean the action will succeed -- the UNIX permissions ultimately determine success or failure.

For example, if the access rights for a share grant UNIX user kevin full access, performing actions as user rod, but the UNIX permissions on the directory only allow read-only access for rod, then kevin won't be able to write to the directory.