USB Storage share permissions don't work
Posted: Fri Dec 23, 2016 11:08 am
Hi. While configuring my wife's iPad with the system for the first time, I found that the USB storage permissions don't apply to it at all. We have 2 drives connected to the router. My account has R/W permissions for both accounts, while my wife has permission only on one of the drives. Anonymous access is open only on specific folders on her drive for sharing videos/pictures with guests as separate shares.
Now, when I configured network shares on her iPad, I found that if we enter her user credentials, she had R/W access on all shares/drives. Only my user account is permitted for R/W access to one of the drives (that I use for work, but by logging in using her account, she got full R/W access to that drive too. However, if she doesn't login, she has access only to anonymous shares. So, it seems that user level permissions aren't applicable for the iPad and the user-specific permissions don't apply for iOS clients.
This seems like a bug in the SMB server where iOS clients can bypass the user restrictions if they provide valid credentials for any registered user.
Now, when I configured network shares on her iPad, I found that if we enter her user credentials, she had R/W access on all shares/drives. Only my user account is permitted for R/W access to one of the drives (that I use for work, but by logging in using her account, she got full R/W access to that drive too. However, if she doesn't login, she has access only to anonymous shares. So, it seems that user level permissions aren't applicable for the iPad and the user-specific permissions don't apply for iOS clients.
This seems like a bug in the SMB server where iOS clients can bypass the user restrictions if they provide valid credentials for any registered user.