docs: Document parametric form of hide and veto files

Bug: https://bugzilla.samba.org/show_bug.cgi?id=15688
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Wed Jul 31 09:41:54 UTC 2024 on atb-devel-224

diff --git a/docs-xml/smbdotconf/filename/hidefiles.xml b/docs-xml/smbdotconf/filename/hidefiles.xml
index f93885e43a3d64d92f87ab9d63b9b280705857bc..3290f8df8db92d324cd9dc2417fdef14212a4ed9 100644 (file)
--- a/docs-xml/smbdotconf/filename/hidefiles.xml
+++ b/docs-xml/smbdotconf/filename/hidefiles.xml
@@ -14,14 +14,22 @@
        as in DOS wildcards.</para>
 
        <para>
-       If a file or directory name is prefixed by &quot;../USERNAME/&quot;
-       or &quot;../GROUPNAME/&quot;, then the subsequent filename is only hidden for the
-       given user or group. Instead of specifying users or groups by name, they
-       can also be specified by SID.
+       <smbconfoption name="hide files"/> can also be used as a
+       parametric option where NAME in</para>
+
+       <para>
+       hide files : NAME =
        </para>
 
-       <para>User and group names use the same format as <smbconfoption
-       name="valid users"/>.</para>
+       <para>
+       specifies a user or group name with the same syntax as
+       <smbconfoption name="valid users"/>. This parametric form can
+       be specified multiple times for different users or
+       groups. This means that &quot;hide files : NAME&quot; set both
+       in the [global] and the share section add up, whereas normally
+       options set in a share section overwrite the default in the
+       [global] section.
+       </para>
 
        <para>Each entry must be a Unix path, not a DOS path and must 
        not include the Unix directory separator '/'.</para>
@@ -46,9 +54,12 @@
 hide files = /.*/DesktopFolderDB/TrashFor%m/resource.frk/
 
 ; Hide some files for anyone and some files for specific users and groups
-hide files = hideforall1/../joe/hideforuserjoe/hideforall2/../students/hideforstudents/hideforall3
-hide files = ../UNIVERSITY\Alumnis/somefile.txt/../john@university.org/anotherfile.txt
-hide files = ../S-1-5-21-123-456-789-1000/secretfile.txt
+hide files = /hideforall1/
+hide files : USER = /hidetoforuser/
+hide files : GROUP = /hideforgroup/
+hide files : UNIVERSITY\Alumnis = /somefile.txt/
+hide files : john@university.org = /anotherfile.txt/
+hide files : S-1-5-21-123-456-789-1000 = /secretfile.txt/
 
 </programlisting>
        </para>

diff --git a/docs-xml/smbdotconf/filename/vetofiles.xml b/docs-xml/smbdotconf/filename/vetofiles.xml
index e47490ee49dd6f4086ff05f480d63934d962a4c3..e90cf707c2d052e93ce0c352b00ce832bdfbb94b 100644 (file)
--- a/docs-xml/smbdotconf/filename/vetofiles.xml
+++ b/docs-xml/smbdotconf/filename/vetofiles.xml
@@ -11,14 +11,22 @@
        </para>
 
        <para>
-       If a file or directory name is prefixed by &quot;../USERNAME/&quot;
-       or &quot;../GROUPNAME/&quot;, then the subsequent filename is only hidden for the
-       given user or group. Instead of specifying users or groups by name, they
-       can also be specified by SID.
+       <smbconfoption name="veto files"/> can also be used as a
+       parametric option where NAME in</para>
+
+       <para>
+       veto files : NAME =
        </para>
 
-       <para>User and group names use the same format as <smbconfoption
-       name="valid users"/>.</para>
+       <para>
+       specifies a user or group name with the same syntax as
+       <smbconfoption name="valid users"/>. This parametric form can
+       be specified multiple times for different users or
+       groups. This means that &quot;veto files : NAME&quot; set both
+       in the [global] and the share section add up, whereas normally
+       options set in a share section overwrite the default in the
+       [global] section.
+       </para>
 
        <para>
        Each filename must be a unix path, not a DOS path and must
@@ -51,9 +59,12 @@
 veto files = /*Security*/*.tmp/*root*/
 
 ; Veto some files for anyone and some files for specific users and groups
-veto files = /vetoforall1/../USER/vetoforuser/vetoforall2/../GROUP/vetoforgroup/vetoforall3/
-veto files = ../UNIVERSITY\Alumnis/somefile.txt/../john@university.org/anotherfile.txt
-veto files = ../S-1-5-21-123-456-789-1000/secretfile.txt
+veto files = /vetoforall1/
+veto files : USER = /vetotoforuser/
+veto files : GROUP = /vetoforgroup/
+veto files : UNIVERSITY\Alumnis = /somefile.txt/
+veto files : john@university.org = /anotherfile.txt/
+veto files : S-1-5-21-123-456-789-1000 = /secretfile.txt/
 
 ; Veto the Apple specific files that a NetAtalk server
 ; creates.