CIFS and Folder Security?

[khanh]

Hello, please help!

How does CIFS folder security work?

I am able to connect to my CIFS using AD credentials and am able to see all folders under the /alfresco folder.

Currently, if a user is not a member of a Site, they can still see files under that site.
Is this handled by Alfresco or am I missing something else?

We don't want them to be able to access site via CIFS if they are not a member of the site. (The DocumentLibrary in particular).

out authentication chain:
authentication.chain=external1:external,alfrescoNtlm1:alfrescoNtlm,kerberos1:kerberos,ldap-ad1:ldap-ad

[khanh]

looks like the security does work, as expected.
If it's a public site, then yes user will see the document library.
If user is not a member of a moderated site, then they won't see it.

[mrogers]

Yes any user can see a public site so it will be shown via cifs.   For a moderated site you can't see the doclib until you are a member.   You can also have a private site.