ACL cannot restrict access for smb share

[andnet]

Hi,
I am running TrueNAS-13.0-U5.3 on proxmox, and have tried for days to establish a sing SMB share with - seemingly simple permissions:

Groups and users created in Truenas:
group: household
members: andreas, betty, charlie

What is supposed to happen:
Only group "household" has access to share "Documents".
Others should not even be able to see contents.

Effect: Everyone has full control in the share. When I deviate from the shown "Share ACL", no one has access to the share at all.



ACL for Datastore: Documents:

(User and group applied.)

From filesystem in shell:

ACL for Share:

Settings for the share Documents:

How can I accomplish my goal? And where did I go wrong?
I have been reading the guides and watching tutorials for days now - nothing seems to help. It is either "Everyone full control" or no access at all.
It is extremly frustrating. I used to be able to create intricate SMB server in plain debian...

Do you need any more details?
Any input is appreciated.
Thank you for your time!

 

[sretalla]

You have enabled ACL... meaning what you're looking at with ls -l is showing you different permissions than those that apply in SMB.

You need to look at getfacl for that directory.

 

[Johnny Fartpants]

Can you share the full screen of your UI dataset ACL please?

 

[Johnny Fartpants]

It's as simple as this. Don't mess about with the Share ACL leave that as default and you should be golden.

 

[andnet]

It's as simple as this. Don't mess about with the Share ACL leave that as default and you should be golden.

Those exact settings result in everyone can access the share, no credentials asked.

 

[andnet]

Everyone, apologies - I decided to consult this community too late and was extremely frustrated with my TrueNas experience.
I installed OpenMediaVault today and was able to get everything setup, with ACL permissions as intended, in less than 20 minutes.