• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 747
  • Last Modified:

Office 2007 changes acl file permissions on a Samba server

I took a .xls file and set the following permissions as seen by getfacl

# file: test.xls
# owner: root
# group: users
user::rwx
user:root:rwx
user:administrator:rw-
group::rw-
group:users:rw-
group:domain\040users:rw-
mask::rwx
other::---

Then I opened the file using Excel 2007, changed it, saved it and this is what I get afterwards

# file: test.xls
# owner: gjohn
# group: domain\040users
user::rw-
user:root:rwx
user:administrator:rw-
group::rw-
group:users:rw-
mask::rwx
other::---

I tested a plain text file using vim connecting to the share over NFS and using notepad over SMB and neither modify the acl permissions so I can only assume that Excel is to blame. Is there anyway to prevent this from happening?
0
coanda
Asked:
coanda
  • 2
1 Solution
 
ProfessorBindokasCommented:
Hi, thanks for asking this question, since it's one that caused me to pull out quite a few hairs in the past.  Unfortunately, it's not an Excel issue, but a problem common to Microsoft Office and OpenOffice in general.  Our view is that the problem is caused by Office's specific way of handling files - when opened for editing, a temporary file is created while editing and when a save occurs, the temp file is converted, completely replacing the existing file with a new version, effectively overwriting the ACL.

Found no way of handling this on SAMBA, since file replacing is a fully "acceptable" operation for the server itself.  The only way we found around it in term of preserving file ownership information was to start using a subversion system in lieu of a simple fileserver.  That gave full control for access plus info on who created, edited, when, etc.
0
 
coandaAuthor Commented:
I will agree that this problem plagues all versions of Office/Excel, but not Office type files in general. As can be seen below OOo has no problems from Windows or Linux preserving ACL file permissions.

Using OpenOffice.org 3.2 from Ubuntu 10.04

acl permissions before save:
-----------------------------------

gjohn@gjohn:/mnt/public/archive$ getfacl test.xls
# file: test.xls
# owner: root
# group: users
user::rw-
user:administrator:rw-
user:gjohn:rw-
group::rw-
group:users:rw-
group:domain\040users:rw-
mask::rwx
other::---

acl permissions after save:
---------------------------------

gjohn@gjohn:/mnt/public/archive$ getfacl test.xls
# file: test.xls
# owner: root
# group: users
user::rw-
user:administrator:rw-
user:gjohn:rw-
group::rw-
group:users:rw-
group:domain\040users:rw-
mask::rwx
other::---

Using OpenOffice.org 3.0 from Windows XP

acl permissions after save:
--------------------------------

gjohn@gjohn:/mnt/public/archive$ getfacl test.xls
# file: test.xls
# owner: root
# group: users
user::rw-
user:administrator:rw-
user:gjohn:rw-
group::rw-
group:users:rw-
group:domain\040users:rw-
mask::rwx
other::---

Using Excel 2002 SP3 from Windows XP

acl permissions after save:
---------------------------------

gjohn@gjohn:/mnt/public/archive$ getfacl test.xls
# file: test.xls
# owner: gjohn
# group: domain\040users
user::rw-
user:root:rw-
user:administrator:rw-
group::rw-
group:users:rw-
mask::rwx
other::---

I personally use a version control system for the work that I do, but asking your coworkers to completely change the way they work is not always greeted with enthusiasm.
0
 
coandaAuthor Commented:
Unfortunately I've not been able to find any better information WRT my problem.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now