Mac OS X Server: Giving groups different permissions on a share point

In Mac OS X Server, only a user can be the owner of a share point, not a group. This renders obsolete the method of assigning a read-write group to the Owner field and a read-only group to the Group field.
You can still achieve the same permissions effect, but the setup is different. Here's an example of how you would do it:

  1. Create two new groups, named "Read-Write" and "Read-Only".
  2. Put all users to whom you want to give read-write access in the group Read-Write.
  3. Put all members of the Read-Write group and all other users to whom you want to give read-only access in the Read-Only group.
  4. Create a new share point named "Share_Point".
  5. Inside Share_Point, create a folder named "Items".
  6. When setting permissions for Share_Point:
    • Make an appropriate user of your choice the Owner.
    • Assign Read-Only to the Group field with read-only permissions.
    • Give Everyone no access.
  7. When setting permissions for Items:
    • Make an appropriate user of your choice the Owner.
    • Assign Read-Write to the Group field with read-write permissions.
    • Give Everyone read-only access.

When a user who is not in one of these two groups connects to the server, he will not see Share_Point. Members of Read-Only and Read-Write will have the desired experience.
Published Date: Feb 17, 2012