Here's the configuration that I want to have:

• SSH access for the "root" and "admin" users via a strong password and/or key
• CIFS access only for CIFS-enabled shares via the smb user (full read+write access)
• Optional: FTP access only for FTP-enabled shares via a specific FTP user or users

My problem:

• Right now the "smb" user has root access via SSH
• If I enable the FTP server, the "smb" user has root access to the file system via FTP

My question:

• Is it possible to allow wide-open CIFS access for the "smb" user (on CIFS-enabled shares) without leaving everything else wide open?

Note: I don't have AD, my goal is to keep this configuration as simple as possible.

I've recently upgraded from 3.0.4 to 3.1.3.