I've been doing some research into OpenSolaris and ZFS for use in a NAS.
Thus far I have created the following:
The total space allocated for tank is 3.4Tb (RAIDZ2). Developers mount is our Subversion repository, it should be locked so only the sysadmins have access to that content plus those in the suDevelopers group.
SandBox is a play area, it's all open doors, read/write/delete whatever.
I'm wondering how I'd achieve the following, whether I'd have to go to using ACLs or just standard Unix permissions.
There are three main groups of users of this NAS, this is in the hierarchy of users. There are no ADs or anything else apart from CIFS to share this NAS.
suDevelopers They have access to all the content in tank.
suStaff These users are the staff at the premises, they should have access to everything except for the developer zfs in the tank.
suContractors These users can only see the Storage folder and not be able to access the others.
The problem is that some files on the storage area contain sensitive information (serial numbers, license keys) we don't want the contractors to see. Can we set those permissions up in Windows by the user who put the file there and they will automatically set to the right place?
I'm not sure how to do the above properly and whether it's ACLs or just CHMOD I should use.