メインコンテンツへスキップ

ファイルのNTFS ACLで削除が禁止されているにもかかわらず、ユーザがファイルを削除できるのはなぜですか？

  1. 最後の更新
  2. PDFとして保存
Views:
11
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:

環境

  • ONTAP 9
  • NTFS

回答

  • ユーザが ファイルの親フォルダに対するDelete-Child権限を持っている
    • nas-cm911::*> show-effective-permissions -vserver fchen_11 -win-user-name fchen@nas-deep.local -path /vol1/folder1 (vserver security file-directory show-effective-permissions) Vserver: fchen_11 Windows User Name: fchen@nas-deep.local Unix User Name: root File Path: /vol1/folder1 CIFS Share Path: - Effective Permissions: Effective File or Directory Permission: 0x1f01ff Read Write Append Read EA Write EA Execute Delete Child Read Attributes Write Attributes Delete Read Control Write DAC Write Owner Synchronize
  • このため、NTFSルールでは、ファイルのACLで 削除が禁止されていても、ユーザはファイルを削除できます。
    • nas-cm911::*> show-effective-permissions -vserver fchen_11 -win-user-name fchen@nas-deep.local -path /vol1/folder1/test.txt (vserver security file-directory show-effective-permissions) Vserver: fchen_11 Windows User Name: fchen@nas-deep.local Unix User Name: root File Path: /vol1/folder1/test.txt CIFS Share Path: - Effective Permissions: Effective File or Directory Permission: 0x1e0080 Read Attributes Read Control Write DAC Write Owner Synchronize

追加情報

 

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.