File Access Authorization

SFTPPlus MFT provides a flexible authorization system that controls how users and groups access files and directories. Permissions can be defined at both user and group levels, allowing precise management of file operations across the platform.

User and Group-Based Permissions ​

Each user in SFTPPlus can belong to one or more groups. Permissions define which operations a user can perform, such as:

  • Reading or downloading files
  • Creating or uploading files
  • Deleting files or directories
  • Renaming files
  • Creating or removing directories

Unlike traditional file system permission models, SFTPPlus uses path-matching expressions to configure access rules. This provides greater control over which files or folders a user can access, regardless of the underlying file system structure.

Application and Operating System Users ​

SFTPPlus supports two user types:

  1. Application users – managed entirely within the SFTPPlus configuration.
  2. Operating system users – local or domain accounts managed by the host OS.

When an operating system user performs a file transfer, SFTPPlus enforces both its internal permissions and the native file system permissions. This dual-layer model helps organizations integrate SFTPPlus without changing existing file system access rules, simplifying migration from legacy systems.

Context-Based Access Control ​

Access permissions in SFTPPlus can also depend on the source of the connection. Groups can be dynamically assigned to users based on their IP address or network location.

For example:

  • A user connecting from the internal corporate network may be granted full access to project files.
  • The same user connecting from the public internet may only have access to a limited set of directories or restricted permissions.

This enables flexible, context-aware access policies that strengthen security while maintaining usability.

Key Benefits ​

  • Granular access control: Define detailed permissions at user or group level using path-based rules.
  • Seamless integration: Enforce both SFTPPlus and native OS file system permissions without reconfiguring existing environments.
  • Context-aware authorization: Adapt user permissions based on IP address or network location.
  • Simplified management: Manage users, groups, and permissions from a single web-based interface.
  • Secure operations: Ensure only authorized users can read, modify, or transfer files.