Security

Ask something
Discussion Locked

Rights replicated through directory's

0 helpful
7 replies

by srnelson

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Does anyone know of anyway to apply rights to directories without changing the current rights on the directories? Example, here is a directory structure \users\johnson, now the currect rights on the directorys are, domain admins have full rights tousers and everything below, the actual directory johnson, the user johnson has full rights to it. What I want done is to add another administrator group to the users directory with it replicating down to all the users without changing any current settings. Any ideas?

7 replies

by eresquigal

The unix model of permissions gives each file a owner and a group.

You can set permissions based on owner, group and other (world).

For aditional permissions, some unixes have ACL's, however the interface to set ACL's is different for each.
For instance, AIX uses aclget, aclput and acledit.

As far as I know, it's not possible to cascade permissions in any unix operating system (due to the way the filesystem is implemented).

by srnelson

Unfortunately I am not in a Unix invironment. We have Windows 2k and Win NT. So if anyone esle has some suggestions that would be great.

by mikel~t

Once you've created your new Admin group, you should be able to add the group to the security permissions of the "users" directory, and apply the permissions to the subfolders of the users directory.

I'm not sure if this is what you are looking for, but once you apply the permission changes to the "users" directory, this won't change any permissions in the subfolders, but will allow for the new admin group to have the permissions on the subfolders I think you are looking for.

Hope this helps.

Mike

by penguinsrule

You create two access control lists - one as a default acl, and the other without the default option. That should cover the directory spec, and all the contents below. If you've already placed permissions on the data in the subdirectory structure you may have to change this as well, but then any
new files will have the new permissions.

This discussion is closed to new replies.