Solved: Permissions on snapshots (previous versions)

bobby_gillette · ‎2011-01-26

Just curious if there's any way to restrict permissions on snapshots or do they have to keep the same permissions as live data...

martin_fisher · ‎2011-01-26

Hi,

Snapshots are a point in time copy of the data, so the permissions set on the data, eg CIFS Share, or SQL DB's (SQL Permissions) within a LUN, at the time the snapshot is taken, are same as the live data (if these have not been changed). if the permissions were changed between snapshots, the snapshots would reflect this.

EG. if you have a CIFS share with my documents folders, for 10 users, and you deny all ACL permissions via windows for 1 user and take several snapshots of the volume, the snaps taken will inherit this permission until its changed or corrected (or left as is!).

Hope this helps

Thanks

View solution in original post

scottgelb · ‎2011-01-26

They keep the permissions at the time of the snapshot and are readonly so can't be changed. You can turn off presentation of ~snapshot or .snapshot though to the users.

martin_fisher · ‎2011-01-26

Hi,

Snapshots are a point in time copy of the data, so the permissions set on the data, eg CIFS Share, or SQL DB's (SQL Permissions) within a LUN, at the time the snapshot is taken, are same as the live data (if these have not been changed). if the permissions were changed between snapshots, the snapshots would reflect this.

EG. if you have a CIFS share with my documents folders, for 10 users, and you deny all ACL permissions via windows for 1 user and take several snapshots of the volume, the snaps taken will inherit this permission until its changed or corrected (or left as is!).

Hope this helps

Thanks

bobby_gillette · ‎2011-01-26

Good information guys, thanks!