Novell Doc: Novell Filr 1.0.1 Administration Guide - Understanding Sharing

3.1 Understanding Sharing

Sharing in Filr enables users to grant access to files and folders to other users, either internal or external to the organization. You can enable users to share the following kinds of files and folders:

Files and folders in users’ My Files areas. This includes files and folders in users’ personal storage (if personal storage has been enabled, as described in Section 4.0, Setting Up Personal Storage) and in users’ Home directories.

Sharing of files and folders in the My Files area is enabled by default for all users after sharing is enabled for the site. You can disable sharing for files and folders in the My Files area on an individual user basis.
Files in Net Folders (files in Net Folders are files that are synchronized to Filr from a corporate file system and that are located in the Net Folders tab in Filr.)

Sharing of files in Net Folders is disabled by default after sharing is enabled for the site. You must enable sharing for each Net Folder and specify which users are allowed to share and what rights they have.

The ability to share folders from Net Folders is not available.

If multiple users share the same item with a single user, the user who receives the share is granted the highest level of access that was shared with the user. For example, if User B shares a file with User A and that grants User A Read rights to the file, then User C shares the same file with User A and grants Read and Write rights to the file, User A has Read and Write rights to the file.

The following sections describe how sharing works in conjunction with Filr rights and file system rights. For more detailed information about how sharing works in Filr, see Sharing through Filr in the How Filr Works–Overview Guide.

3.1.1 Users Can’t Grant Share Roles That They Don’t Have

Users with Contributor rights on folders can grant Viewer, Editor, and Contributor rights to other users as Filr system share and Net Folder share settings allow.

On the other hand, Users with Viewer rights on folders can only grant Viewer rights to other users with whom they are allowed to share.

3.1.2 File System Rights Also Affect the Ability to Assign Share Roles

Sharing of files and directories involves an additional layer that provides access and manages what those who are granted rights to share files can actually do.

For users to grant Viewer, Editor, or Contributor rights to another user, they must have the minimum rights that those roles require, as outlined in the following tables.

Table 3-1 NSS File System Rights and Filr Roles

Role	Minimum NSS Rights Required	Comments
Viewer	Read (R), File Scan (F)	These are the minimum file system trustee rights that users must have to view files and folders.
Editor	Read (R), Write (W), File Scan (F)	If the Write file system trustee right is added to Read and File Scan, users can then modify file content.
Contributor	Read (R), Write (W), Erase (E), Create (C), Modify, File Scan (F) or Supervisor	To perform contributor functions, users must either have all file system trustee rights to the file or folder (except for Access Control) or the Supervisor right to the file or folder. The presence or absence of Access Control has no meaning in Filr because Filr cannot modify file system trustee rights. A Filr user with the Access Control right on the file system cannot grant file system access to another user through Filr. It is true that Filr users with sufficient Filr permissions can share access to files and folders with other users, but this is a Filr function that leverages the file system rights of Net Folder proxy users. Access to shared files and folders is independent of any file system rights that individual users have or do not have.

Role

Minimum NSS Rights Required

Comments

Viewer

Read (R), File Scan (F)

These are the minimum file system trustee rights that users must have to view files and folders.

Editor

Read (R), Write (W), File Scan (F)

If the Write file system trustee right is added to Read and File Scan, users can then modify file content.

Contributor

Read (R), Write (W), Erase (E), Create (C), Modify, File Scan (F)

Supervisor

To perform contributor functions, users must either have all file system trustee rights to the file or folder (except for Access Control) or the Supervisor right to the file or folder.

The presence or absence of Access Control has no meaning in Filr because Filr cannot modify file system trustee rights. A Filr user with the Access Control right on the file system cannot grant file system access to another user through Filr.

It is true that Filr users with sufficient Filr permissions can share access to files and folders with other users, but this is a Filr function that leverages the file system rights of Net Folder proxy users. Access to shared files and folders is independent of any file system rights that individual users have or do not have.

Table 3-2 NTFS Permissions and Filr Roles

Role	Minimum NTFS Permissions Required	Comments
Viewer	Read, Read & Execute, List Folder Content	These are the minimum basic permissions that users must have in order to view files and folders. The default special permissions associated with these basic permissions are also required.
Editor	Read, Read & Execute, List Folder Content, Write	If the basic Write permission is added, users can then modify file content. The default special permissions associated with these basic permissions are also required.
Contributor	Read, Read & Execute, List Folder Content, Write, Modify or Full Control	To perform contributor functions, users must either have the basic Modify permission added or they must have the basic Full Control permission. The default special permissions associated with these basic permissions are also required.

Role

Minimum NTFS Permissions Required

Comments

Viewer

Read, Read & Execute, List Folder Content

These are the minimum basic permissions that users must have in order to view files and folders. The default special permissions associated with these basic permissions are also required.

Editor

Read, Read & Execute, List Folder Content, Write

If the basic Write permission is added, users can then modify file content. The default special permissions associated with these basic permissions are also required.

Contributor

Read, Read & Execute, List Folder Content, Write, Modify

Full Control

To perform contributor functions, users must either have the basic Modify permission added or they must have the basic Full Control permission. The default special permissions associated with these basic permissions are also required.