Solved

Office 2007 changes acl file permissions on a Samba server

Posted on 2010-09-16
3
711 Views
Last Modified: 2012-05-10
I took a .xls file and set the following permissions as seen by getfacl

# file: test.xls
# owner: root
# group: users
user::rwx
user:root:rwx
user:administrator:rw-
group::rw-
group:users:rw-
group:domain\040users:rw-
mask::rwx
other::---

Then I opened the file using Excel 2007, changed it, saved it and this is what I get afterwards

# file: test.xls
# owner: gjohn
# group: domain\040users
user::rw-
user:root:rwx
user:administrator:rw-
group::rw-
group:users:rw-
mask::rwx
other::---

I tested a plain text file using vim connecting to the share over NFS and using notepad over SMB and neither modify the acl permissions so I can only assume that Excel is to blame. Is there anyway to prevent this from happening?
0
Comment
Question by:coanda
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 11

Accepted Solution

by:
ProfessorBindokas earned 500 total points
ID: 33699893
Hi, thanks for asking this question, since it's one that caused me to pull out quite a few hairs in the past.  Unfortunately, it's not an Excel issue, but a problem common to Microsoft Office and OpenOffice in general.  Our view is that the problem is caused by Office's specific way of handling files - when opened for editing, a temporary file is created while editing and when a save occurs, the temp file is converted, completely replacing the existing file with a new version, effectively overwriting the ACL.

Found no way of handling this on SAMBA, since file replacing is a fully "acceptable" operation for the server itself.  The only way we found around it in term of preserving file ownership information was to start using a subversion system in lieu of a simple fileserver.  That gave full control for access plus info on who created, edited, when, etc.
0
 
LVL 3

Author Comment

by:coanda
ID: 33703390
I will agree that this problem plagues all versions of Office/Excel, but not Office type files in general. As can be seen below OOo has no problems from Windows or Linux preserving ACL file permissions.

Using OpenOffice.org 3.2 from Ubuntu 10.04

acl permissions before save:
-----------------------------------

gjohn@gjohn:/mnt/public/archive$ getfacl test.xls
# file: test.xls
# owner: root
# group: users
user::rw-
user:administrator:rw-
user:gjohn:rw-
group::rw-
group:users:rw-
group:domain\040users:rw-
mask::rwx
other::---

acl permissions after save:
---------------------------------

gjohn@gjohn:/mnt/public/archive$ getfacl test.xls
# file: test.xls
# owner: root
# group: users
user::rw-
user:administrator:rw-
user:gjohn:rw-
group::rw-
group:users:rw-
group:domain\040users:rw-
mask::rwx
other::---

Using OpenOffice.org 3.0 from Windows XP

acl permissions after save:
--------------------------------

gjohn@gjohn:/mnt/public/archive$ getfacl test.xls
# file: test.xls
# owner: root
# group: users
user::rw-
user:administrator:rw-
user:gjohn:rw-
group::rw-
group:users:rw-
group:domain\040users:rw-
mask::rwx
other::---

Using Excel 2002 SP3 from Windows XP

acl permissions after save:
---------------------------------

gjohn@gjohn:/mnt/public/archive$ getfacl test.xls
# file: test.xls
# owner: gjohn
# group: domain\040users
user::rw-
user:root:rw-
user:administrator:rw-
group::rw-
group:users:rw-
mask::rwx
other::---

I personally use a version control system for the work that I do, but asking your coworkers to completely change the way they work is not always greeted with enthusiasm.
0
 
LVL 3

Author Closing Comment

by:coanda
ID: 33736937
Unfortunately I've not been able to find any better information WRT my problem.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

My attempt to use PowerShell and other great resources found online to simplify the deployment of Office 365 ProPlus client components to any workstation that needs it, regardless of existing Office components that may be needing attention.
Cancel future meetings from user mailboxes in Office 365 using Remove-CalendarEvents
The viewer will learn how to use the =DISCRINV command to create a discrete random variable, use this command to model a set of probabilities and outcomes in a Monte Carlo simulation, and learn how to find the standard deviation of a set of probabil…
The viewer will learn how to create a normally distributed random variable in Excel, use a normal distribution to simulate the return on an investment over a period of years, Create a Monte Carlo simulation using a normal random variable, and calcul…

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question