Scan to PC File Permissions

[itac.technology]

Hi @NRCAC,

How'd you go with this one? I've got the same issue and can't find a solution. Would love to hear the latest from your attempts! :)

[DavidX28897-xrx]

Didn't know that, Thanks

[NRCAC]

Thanks for that David, I'll check the ACLs.

btw, if you send me an email attachment where only you have read/write access, I won't be able to read it unless "everyone" is set to "read". If "everyone" is set to "no access", I wont be able to read it. That's the issue here.

Cheers.

[DavidX28897-xrx]

Is your PC a server?

https://support.apple.com/en-us/HT203574

Testimony:

This solved the problem I had with the Lexmark CX825 Multifunktion Printer & Scanner while writing scanned files to my OSX High Sierra Mac Mini Server share. The issue was: the files always ended up on the OSX file share accessible only by the user who was logged in in to the Lexmark CX825 while scanning to the OSX share. Nobody else in the same group could even read the file who were scanned by the group member. – Uwe Günther Feb 3 '18 at 11:00 

As Joe said file permissions are handled by the OS locally. If I set security permissions on a pdf where I only have read/write access, then email you the file, you can still read it.

[NRCAC]

Thanks for taking the time to reply.

The issue isn't with the Shared Folder permissions. They are set correctly, and as I've said, there's no trouble with all users accessing the shared folder. In MacOS, files copied to a shared folder do not automatically inherit the parent folder's permissions.

So the problem is, when a PDF sent from the Xerox via SMB lands in that folder, "everyone" is set to "no access". Only the account used for the SMB transfer (set in the Xerox) has read/write privileges.

There is a workaround with Folder Action Scripts, but this involves having to embed administrator login details into the script (a security issue) – at least that's the best I can do so far.

Was just trying to get to the bottom of why this is happening in the first place. Presumably MacOS receives the files with no permission as such, and only applies "read/write" for the account whose log/pass is used for the SMB transfer, and sets everything else to "no access".

[Joe Arseneau]

Permissions are handled by the OS, not Xerox, Xerox did not create the folder. Assuming you have admin rights on the Mac the fix is to simply click on it and change it from No Access to Read & Write.

If you can't do it , you need to click the lock and type in the Macs admin account credentials.

[NRCAC]

Just curious – when scanning to PC, the file permissions come through with read/write set for the user in the Xerox address book (the credentials used to log into the PC via SMB), but "world/everyone" is set to "no access".

I don't know if the Xerox is doing this, or the Mac when it receives the file. The upshot is, saving to a Shared folder on the PC is pointless, because even though all users on the computer can access the folder, they can't open the files (only the user set up on the Xerox for SMB transfer can).