Dell DR Series System Administrator Guide

To enable Windows access, the DR Series system supports access control lists (ACLs) that contain zero or more access control entries (ACEs), and an empty ACE list grants all access requests. The Windows New Technology File System (NTFS) uses ACLs as part of the security descriptor (SD) process, which requires permissions to access such filesystem objects as files and directories. ACLs support two levels of users:

• Owners
• Groups

Both Owners and Groups have Security IDs (SIDs) that define and identify an object owner or the group owning an object. ACEs in an ACL consist of a SID, a specific permission that either allows or denies access and also defines which of the following inheritance settings apply:

• IO—inherit-only: not used for access checking.
• OI—object inherit: new files get this ACE added.
• CI—container inherit: new directories get this ACE added.

Windows NTFS ACLs include the following read, write, append, execute, and delete permissions that allow users to:

• Synchronize access
• Read data or list the directory
• Write data or add a file
• Append data or add a folder
• Read Extended Attributes (EAs)
• Write EAs
• Execute file or traverse folders
• Delete child or delete folders
• Delete a file