Folder permission control on a USB drive

To configure folder access limits for users on the USB storage device in the Keenetic, a 'Folder permissions control' system component should be installed. You can do this on the 'General system settings' page in the 'Updates and components' section by pressing 'Component options'.

acl-comp-en.png

Let's consider an example of configuring access rights for two users (ivan and maria) who will be allowed full access to their personal folder only.

First connect the drive as instructed Connecting a USB drive.

Then go to the 'Applications' page. Click the 'Windows network' link to configure the file server. In the 'Users' section, disable the 'Anonymous access' option (otherwise all users will have full rights without authorization) and create user accounts with access rights to disks by clicking the 'Create user' button. In our example we have added two accounts - ivan and maria.

acl-01-en.png

Then, on the 'Applications' page in the 'USB Devices' section, click on the connected disk entry.

acl-02-en.png

The built-in file manager will appear, where you will see all the folders on the disk.

acl-03-en.png

We will create two personal folders ivan and maria in the parent directory. You can do this either by connecting the drive to your computer or directly from the built-in file manager.
To do this, go to the root directory and then click fb01.png (Create a directory inside the selection). In our example, two folders, ivan and maria, were created.
If necessary, you can add files to the folder by clicking fb03.png (Upload file to selected directory). To delete a file or folder, click fb04.png (Delete).

Now select the necessary folder for which you want to set certain permissions of access and click on  usb08.png (Configure access permissions). 

The following access permissions are available:

  • Access denied;
  • Read-only;
  • Read and write;
  • Inherited (rights inherited from parent folder).

If you want to grant a full access to only one folder to a user and deny the others, this user should be granted the following rights:

  • 'Read-only' for whole drive;
  • 'Read & Write' for the folder you want to give full access to;
  • 'Access denied' for all folders in the root directory, except the folder that you want to give full access to.

In our case, the ivan folder has 'Read & Write' access for the ivan user and 'Access denied' access for the maria user.

acl-04-en.png

For the maria folder in the same way we have set the permissions for the maria user — 'Read & Write', and for the ivan user — 'Access denied'.

acl-05-en.png

Next, go to the parent directory and click usb08.png (Permissions set up) to edit the permissions of the parent directory. 

To allow users to find the folder they have access to, you need to set the parent directories to read-only. In our example, the parent directory is the USB drive itself, since the user folders are in the root directory, so ivan and maria users have set read-only permissions.

acl-06-en.png

This completes the folder permissions configuration.

Below is an example of how to set up access to a USB drive from Windows. Launch the 'Run' application or the 'Explorer' file manager. In the address bar, enter the Keenetic network name after \\ (in our example it is \\Keenetic). The network address can be \\my.keenetic.net or the local IP address \\192.168.1.1

acl-07-en.png

acl-08-en.png

Then the authorization request will follow, as the 'Anonymous access' option has been disabled. Enter the login and password for the account you want to connect to (in our example it is ivan or maria).

acl-09-en.png

After successful authorization, you will see the network share folders.

acl-10-en.png

When you connect with an ivan account, you will only be allowed full access to the personal ivan folder. If you try to upload a file or create a folder anywhere else, you will see a message that you do not have permissions.

acl-11-en.png

 

Have more questions? Submit a request

Comments

0 comments

Please sign in to leave a comment.