admin/felhom-controller
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(samba): Explorer human leg PASSED — R-7 slice 1 fully PROVEN-LIVE

Browse Source 
Viktor confirmed on the demo box: Network -> FELHOM -> both shares open; an
INTERACTIVE Explorer save into dokumentumok succeeded and landed owned 1000:1000
(force user holds for a real Explorer write, not just a scripted one); a write
into the read-only filmek was refused by Windows with the folder left empty on
disk. Capability-map row flipped to PROVEN-LIVE in felhom.eu.
This commit is contained in:
authentik Default Admin
2026-07-18 12:12:51 +02:00
parent a4c82a2651
commit 3dfc49e578
3 changed files with 13 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
REPORT.md
+7 -3
View File
@@ -141,6 +141,7 @@ page) from inside guest 9201. No server logic skipped — only client rendering.
| **Write-refused (read-only)** | write to `\\192.168.0.127\filmek` **rejected**; folder still empty on the box (non-effect proven) |
| `force user` promise | SMB-written `r7.txt` owned **1000:1000** on the box |
| WS-Discovery | ProbeMatch from `192.168.0.127` **PASS** |
| **Explorer (human, Viktor)** | both shares open from the Network view; interactive Explorer **save** landed owned `1000:1000`; write into the read-only share **refused**, folder still empty |
#### Two real bugs caught by live validation (fixed + regression-tested)
@@ -155,9 +156,12 @@ page) from inside guest 9201. No server logic skipped — only client rendering.
### 8. NOT yet live-validated
- **Explorer render — Viktor's human leg.** Network view shows `FELHOM`, double-click opens both
shares. Everything objective around it passed (ProbeMatch, 445, NetBIOS name resolution, by-name
mount), so this is UX confirmation, not a mechanism gate. Stack + both shares are live on the demo box.
- ~~Explorer render~~ — **PASSED 2026-07-18 (Viktor).** Network → FELHOM → both shares open. He went
further than the scripted leg: a real Explorer **save** into `dokumentumok` succeeded and landed on
the box owned **1000:1000** (so `force user` holds for an interactive Explorer write, not just a
scripted one), and a write into the read-only `filmek` was refused by Windows
("Destination Folder Access Denied") with the folder left **empty** on disk. Slice 1 is fully
PROVEN-LIVE; the capability-map row is flipped.
- **Share data in a real backup run** — blocked by the §4 design fork (classified, not executed).
- **Symlink-escape guard on Linux** — unit test SKIPs on Windows (no privilege).
- Drive-disconnect behaviour live (unit-tested only); multi-root share sets; SMB throughput/signing.