Isn't it still required to change the user's whose folder is shared password via smbpasswd before others can access it?