Setting Personal Shares to Read-Only

[shocko]

We use OnTap 9.x and all users have personal shares. We have a use case to make some of these personal share's read-only. Aside from actually setting the read-only attribute on the folders/files therine is there any method to mark a personal share as read-only at the Ontap side?

[elementx]

I'm not trying to offer an answer, but I'd move such shares to S3 as buckets. You'd need a curator, but this is what people often want for such buckets (e.g. for departed employees, a storage or some departmental admin may be in charge, which seems more suitable for that use case, IMO). This may or may not be better - it depends on the requirements and environment.

[shocko]

Thanks for the reply @elementx . Definately we need to archive but we have snaphots (goingback over 1 year) for this. Still though, I'd prefere not to have to go to the users folder and set the read-only flag or modify the ACL. Can anyone offer another solution? Might one option be the following:

- add an ADDS group wth explicty deny ? Add the user to the group. They then don't techincally have any access.

[shocko]

Revisiting this as now on Ontap 9.12. Is there any method of doing this? I was thinking I could use Fpolicy for it possibly but not sure how I could target individual users.