topic Re: Setting Personal Shares to Read-Only in ONTAP Discussions

Setting Personal Shares to Read-Only

shocko — Tue, 04 Jun 2024 07:39:15 GMT

We use OnTap 9.x and all users have personal shares. We have a use case to make some of these personal share's read-only. Aside from actually setting the read-only attribute on the folders/files therine is there any method to mark a personal share as read-only at the Ontap side?

Re: Setting Personal Shares to Read-Only

elementx — Tue, 04 Jun 2024 14:11:57 GMT

I'm not trying to offer an answer, but I'd move such shares to S3 as buckets. You'd need a curator, but this is what people often want for such buckets (e.g. for departed employees, a storage or some departmental admin may be in charge, which seems more suitable for that use case, IMO). This may or may not be better - it depends on the requirements and environment.

Re: Setting Personal Shares to Read-Only

shocko — Wed, 16 Oct 2024 11:20:02 GMT

Thanks for the reply @elementx . Definately we need to archive but we have snaphots (goingback over 1 year) for this. Still though, I'd prefere not to have to go to the users folder and set the read-only flag or modify the ACL. Can anyone offer another solution? Might one option be the following:

- add an ADDS group wth explicty deny ? Add the user to the group. They then don't techincally have any access.

Re: Setting Personal Shares to Read-Only

shocko — Fri, 13 Dec 2024 18:03:31 GMT

Revisiting this as now on Ontap 9.12. Is there any method of doing this? I was thinking I could use Fpolicy for it possibly but not sure how I could target individual users.

Re: Setting Personal Shares to Read-Only

Ashun — Fri, 20 Dec 2024 08:28:49 GMT

Choose to modify the ACL, it is accurate and fast

Re: Setting Personal Shares to Read-Only

shocko — Wed, 19 Mar 2025 10:32:54 GMT

I ended up using Storage Level Access Guards for this