Write only access rights

TrueNAS General
,
1

In my workflow I have few MFP devices which can output their files to truenas SMB share.

This devices have their own account and I would like to limit access rights of this devices so that they can only write new files and can not access already existing ones. Is that possible?

I guess it should be possible - my thinking is that MFP should be able to traverse directory structure to output folder, be able to list all of the files in directory (likely to check if there is existing filename) and then write new file.

I have played a little with advanced file access rights but could not nail the combination.

2

On the dataset or folder, give the user permission for:

  • “Read data” (in order to list directory contents)
  • “Write data” (create files)
  • “Execute” (for traversal).
  • “Read ACL” (SMB requires this, not sure why)

DISABLE inheritance for this entry selecting “No inherit”.

Remove any @owner/@group ACL entries.