USB Storage share permissions don't work

[piyooshm]

Hi. While configuring my wife's iPad with the system for the first time, I found that the USB storage permissions don't apply to it at all. We have 2 drives connected to the router. My account has R/W permissions for both accounts, while my wife has permission only on one of the drives. Anonymous access is open only on specific folders on her drive for sharing videos/pictures with guests as separate shares.
Now, when I configured network shares on her iPad, I found that if we enter her user credentials, she had R/W access on all shares/drives. Only my user account is permitted for R/W access to one of the drives (that I use for work, but by logging in using her account, she got full R/W access to that drive too. However, if she doesn't login, she has access only to anonymous shares. So, it seems that user level permissions aren't applicable for the iPad and the user-specific permissions don't apply for iOS clients.

This seems like a bug in the SMB server where iOS clients can bypass the user restrictions if they provide valid credentials for any registered user.

[Lantis]

What version of Gargoyle are you using?

I addressed an issue with share permissions in 1.9.1.

If this is what you're already running, or it doesn't solve your problem, can you please provide a list of your share settings/drive setup so I can try to replicate the issue.
Also what app or method are you using from the iPad to access the share?

[piyooshm]

I'm running v1.9.1. What information do you need? A snapshot of the interface page or config files from shell?

[Lantis]

A snapshot of the whole page, and then a shot of each of the "edit" menus so we can see the detailed settings.
Also what are you using on the devices to access the shares?

[piyooshm]

Hi! First of all, I just figured out that this problem is certainly not specific to iOS devices. I just tried using ES FIle Explorer on my android phone too. I connected to the router using the other user ID and it gave me R/W access even to the drive that shouldn't have been accessible. So, it seems like a general (not OS-specific) issue with user permissions.

I could not attach images to the message (it says "Sorry, the board attachment quota has been reached.") So, I'm providing URLs of images on a sharing site.

On iOS, I tried using two software, as shown here:


The requested snapshots for settings are here:














Now, as seen from these settings, "tanu" doesn't have access to share named "desktop" (the restricted disk). However, that user is getting full R/W access on that disk.

[piyooshm]

Hey Lantis! Could it be related to global settings? When looking through the config files, I noticed that the global settings were more permissive like read-write.

[piyooshm]

Hi Lantis! Did you get a chance to look at the issue? Were you able to reproduce it?

[Lantis]

I haven't sorry mate. Been very busy at work and at home.
I've got my test router up and running at the moment so I'll see if I can whip up some tests.

[Lantis]

Well with some testing it definitely doesn't behave as it should... i'll see what i can figure out