This option presents a list of users against which Samba will test a connection password to allow access. It is typically used with clients that have share-level security to allow connections to a particular service based solely on a qualifying password - in this case, one that matches a password set up for a specific user:
[global]
security = share
[data]
username = andy, peter, terry
We recommend against using this option unless you are implementing a Samba server with share-level security.