DLO0001: Full Backup Automatically Converts to an Incremental Backup
For information, see KB article DLO0001.
CC0008: Users have access to files and folders belonging to others users
Symptom
Users are able to browse, find, and restore files and folders associated with other users from all user interfaces, for example, the CommCell Console.
Cause
-
ACLs (Access Control Lists) are not included in the backup
-
The user has the Browse permission instead of only the End User Access permission
Resolution
-
Configure the End User Access permission on the client computer.
Assigning the End User Access permission helps to maintain multiple user profiles on the same laptop (or desktop) and ensures that each user has the ability to browse and restore only the data to which he or she has access. For instructions, see Configuring End-User Operations on Client Computers.
-
If the Browse permission is assigned to these users, remove it.
-
Make sure the Catalog ACL (end user access control list) option is enabled in the subclients before performing a backup as described in:
-
Subclient level - Restricting User Access with Access Control Lists (ACLs)
-
Subclient Policy level - Enabling End User Access Control During Backups
Note: This option can be enabled only for users who log in with their Active Directory credentials.
Once this option is enabled, ACLs are included in the backup, which allows users to access only files and folders for which they have permissions.
Tip
After enabling this option, run a Full backup. This ensures that ACLs are available in the backup data.
If you run a Differential or Incremental backup after enabling this option, only the newer data will include ACLs.