File permissions on NAS shared folders

pts.
Tags:
File permissions
NAS
Shared folders
Good day to all! I would like some information on best practices for a NAS file server specifically regarding file permissions. Currently, anyone who has access to a folder at my company can delete any item in that folder, regardless of who created the item. I personally feel this is incorrect but I am meeting with great resistance getting this simple delete permission removed. Any information anyone can give would be of great help. We currently use departmental, application, and company-wide shares that are mapped on login. Thanks again for any help provided!!

Answer Wiki

Thanks. We'll let you know when a new response is added.

This seems to be more of a policy question than a technical one. From a best practices standpoint, the rule of “least privilege” seems pretty straightforward. Users in certain divisions, business groups and organizations should only have rights to those shares. Beyond that, the ability to create, delete, modify and so forth, should be determined by business and regulatory policy. Is your business required to archive documents? Respond to inquiries or legal disclosures? If so, there should be an overall policy determined by management, not the IT group, to determine what can be deleted, by whom and under what circumstances.

If I were in your shoes, this would trouble me greatly. I would certain discuss this with my management. At the very least, I would make a record of notifying management, and save it – just in case someone decides to hold me accountable.

Discuss This Question:  

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following