From a Filr perspective, users can get the required permissions to access files and folders in Net Folders in one of three ways:
Directly: Users are assigned permissions to the files and folders on the file system or SharePoint Document Library where they reside. After they are imported as LDAP users, Filr administrators can then grant them access to the Net Folder. The system then derives a role based on their file system rights.
Group Membership: Users can also inherit permissions to the files and folders through membership in a group that has been assigned the required permissions on the file system. After the group is imported through LDAP and granted access to a Net Folder, group members have the same rights as if they were directly assigned.
Shared Access: Users who receive and accept share invitations to Net-Folder-based files and folders, access the shared items through the Net Folder’s assigned proxy user. Each proxy user must have the required permissions on the file systems that are targeted by the assigned Net Folders.
My Files can contain Home folders and/or personal storage.
Home folder access is controlled by the file system where the folder is located. Personal Storage is located in Filr-based storage and access is directly controlled by Filr.
Direct Ownership: Filr users have full ownership of their personal files and folders, whether in Filr-based personal storage or in their home folders.
Shared Access: If sharing is enabled at the system level, then by default, users can share their personal folders and files within system constraints.
The sharing process involves assigning a shared-access role to the folder or file being shared.
IMPORTANT:Before granting access to their personal storage, users should clearly understand each shared-access role, especially the Contributor shared-access role, which allows share recipients to rename or delete the shared folder.