QNAP TS-459U-RP Turbo NAS Reviewhardnrg - July 22, 2010
» Discuss this article (8)
So, with the system and disks configured, the next step is to set up a number of users for the NAS. In this way, you can restrict and allow access to certain folders, as well as defining different levels of read/write permissions for each user or user group. Other benefits are being able to set up a disk quota per user, and being able to have a clearer picture when viewing the system access/connection logs.
The process of setting up a new user is simplified by yet another wizard. After choosing a user name and password, and seeing the quota settings disabled by default, you can choose which user group the new user belongs to.
The default is to set up a user without a personal folder, but you can create one in the wizard and have it assigned to the new user.
The access privileges for each user are inherited from the user groups to which they belong, but you can also override the access rights to each folder by defining one or more user-specific privileges.
The final two pages of the user creation wizard show a summary of the chosen settings, and confirmation of successful user account creation.
If you connect to the NAS anonymously (i.e. without logging on as a user), you will be denied access to the shared folders. The folders appear visible, but you will not be able to see or access their contents.
The exception to this is the Public folder, which can be accessed anonymously.
If you change the logon from anonymous to a valid user, you gain access to all the folders defined for that user (including those inherited from the user's user group).
Creating individual accounts for many users could quickly become laborious, and QNAP provides a handy wizard to generate multiple users. The user names are generated by a prefix and an incremented number. So, in this example, the first user name is user01, second is user02, and so on up until user16. As you can start at any number, you could continue at a later time, starting at user17.
The last choice is whether or not to set up private folders for each user. If you choose "no", the wizard skips to the end, confirming multiple user account creation.
The newly generated users appear individually in the list, so you can go ahead and change per-user settings if necessary.
Important settings that you may want to edit for each user are the password, disk quota, user group, and access rights.
The next section in Access Rights Management is User Groups. This allows you to create different groups that each have a list of users, and a common set of access privileges which are inherited by its members. Rather than editing each user one by one, to assign them to a group, you can select the users for each user group.
Creating a user group is very simple, you only have to decide its name, and select users as group members. The wizard ends with confirmation of user group creation.
Here, I have edited the group access privileges to read only for most folders, to prevent any modification or deletion. The Network Recycle Bin folder is granted Read/Write access to allow future usage of the NAS's recycle bin, and the Pro folder is denied access, so that my professional files cannot be viewed, changed or deleted by this user group.
The NAS has several default folders that are created when the disk volume is made: Download, Multimedia, Network Recycle Bin 1*, Public, Recordings, USB, Web. These default folders cannot be deleted or renamed. This Share Folders tab gives you an at-a-glance view of the size of each folder, and the number of files and folders they contain. * successive disk volumes would have incrementally named recycle bin folders, e.g. Network Recycle Bin 2, etc.
For each folder, you can reassign it to a different disk volume, choose its visibility, enable oplocks (keep files updated correctly when opened by multiple users), choose the path and comment, and toggle write-only access over FTP. You can set the access rights for users, as well as choosing the access right for anonymous (guest) users. The last two controls for each folder allow you to define for access rights over NFS (e.g. Unix) and WebDav (edit/manage files over the Internet).
Folder Aggregation allows you to create a shared folder on the NAS that can contain other network shares on other computers and servers. These Portal Folders act as a parent folder for its member shared folders.
Once created, you can define a number of remote folders on other hosts to be available within the portal folder.
Each folder is then visible and accessible as if you connected directly to the remote shared folder. This greatly simplifies networks with shared folders on several hosts, as you can have a central point of connection on the NAS rather than creating mapped network drives for each remotely shared folder on the network.
The last tab in Access Right Management lets you enable a quota with a system-wide size. When enabled, you can then define individual quota sizes for each user.