Apple Xsan 1.1 - Manual (Page 74)

74 Chapter 4 Managing Clients and Users
Controlling Client and User Access
You can control access to information on SAN volumes at several levels:
 You can restrict user access to folders on a volume by specifying owner, group, and
general access permissions (folder level).
 You can unmount a SAN volume from selected client computers (volume level).
 You can restrict a client computer to read-only access to a volume (volume level).
 You can remove a client from a SAN (SAN level).
Controlling Access to Folders on Volumes
To restrict user access to specific folders on a SAN volume, assign access permissions to
the folder.
To assign folder access permissions:
1 Make sure the volume is started and mounted on the controller.
To start a volume, select it and click Start Volume. To mount it, select the volume, click
Clients, select the controller, and click Mount Read & Write.
2 In Xsan Admin, select the volume that contains the folder, and click Affinities.
Volumes are listed in the SAN Components list under the SAN to which they belong.
3 Select the folder in the list and specify permissions at the bottom of the window.
4 Click Save.
Unmounting a Volume on a Client
To prevent a client from accessing a volume, you can unmount the volume from the
client. Clients can’t mount SAN volumes themselves; only an administrator can mount a
SAN volume on a client.
To unmount a volume:
1 Open Xsan Admin, select the volume, and click Clients.
2 Select the client computer in the list and click Unmount.
Restricting a Client to Read-Only Access
To prevent a user logged in to a client computer from modifying data on a SAN
volume, you can mount the volume on the client with read-only permissions.
To grant read-only volume access:
1 Open Xsan Admin, select the volume, and click Clients.
2 Select the client computer.
3 If the volume is already mounted on the client, click Unmount.
4 Click Mount Read Only.