Confused on user:group membership + Samba Share topic

This is a home environment, no business security needs here. I have several Samba Shares off of my linux "server". I have all the Windows machines map drives to several of the shares off the Ubuntu server. Every computer can read/write to the shares. It works great! But now I'm trying to change something and am having trouble. Current SMB.conf below:

Code:

---

[global]workgroup = WORKGROUP
server string = %h server (Samba, Mythbuntu)
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
panic action = /usr/share/samba/panic-action %d
dns proxy = no
security = share

[documents]
common = Documents
path = /media/4tb/documents
public = yes
writeable = yes
create mask = 0664
directory mask = 0777
follow symlinks = yes
force user = username1
force group = username1

---

What I am now doing, is I have installed "Owncloud" and it is working great. However, instead of having the Owncloud agent running on the desktop computers, I have the "owncloud" data directory configuration pointed toward /media/4tb/documents/owncloud - a sub directory of the "Documents" share shown above in the Samba config.

So as it stands now...

1. All my windows PCs can read/write perfectly via the samba shares with the current settings.
2. Owncloud users can read/write perfectly via the web gui and the agent to /media/4tb/documents/owncloud

So here's my problem:
1. When a windows user tries to open the folder /media/4tb/documents/owncloud via the SMB share, they get an access denied message.
2. The ownership of everything in /media/4tb/documents/* has always been:

Code:

---

drwxr-xr-x 20 username1 username1  4096 Feb  3 10:52 documents

---

3. The ownership of /media/4tb/documents/owncloud must be

Code:

---

drwxrwx---  4 www-data    www-data    4096 Feb  3 09:41 owncloud

---

Do I need to change the r/w/x of the Owncloud folder so more than just www-data can read/write to it?
I tried adding username1 to the www-data group and vice versa but that didn't seem to work. I assumed that I could do Active Directory type "Security Group" theory to the www-data group by adding my username1 to that www-data group.

Any tips to what I am doing wrong are welcomed! Hopefully this makes sense to someone what I am trying to do.