4.15 File and Folder Attributes and ACL Permissions in a Standard Pair

For a standard pair, Dynamic File Services automatically synchronizes the attributes and ACL (access control list) permissions on files and folders that it moves, whether the move is triggered by a policy or by a user that accesses the data via the merged view.

After creating a standard pair, ensure that you use the merged view of the pair’s file tree when modifying the attributes and ACL permissions on files and folders in the pair. To make changes, access the pair via the network share on the primary path, then modify the settings.

To add user name entries to a folder’s ACL list, you must make the changes directly for the instance of the folder on the primary path. Windows does not allow user names to be added to the ACL list when you are working in the merged view. DynamicFS monitors for security changes on the primary path and automatically synchronizes the ACL settings on the instance of the folder on the secondary path.

WARNING:Modifying the attributes and ACLs on folders when you are working outside of a merged view can cause conflicts for these values between the two folder instances on the primary path and secondary path.

To identify conflicts caused by mismatched attributes or ACL settings on a folder, you can run the DynamicFS Pair Check utility (DswPairCheck.exe) to manually detect and report the attribute and ACL differences between the two instances of the folder. For information, see Section 8.11, Reporting Conflicts for Attributes and ACL Permissions on Folders.