Koozali.org: home of the SME Server

FTP and Ibay permissions

Offline Neririn

  • ****
  • 100
  • +0/-0
FTP and Ibay permissions
« on: February 05, 2004, 04:41:46 PM »
I have tried to post this several times, succeeded once in the General Discussion but have not received any help.  Hopefully the more knowledgeable are hanging out in this forum.

I would like to know if there is a way to configure settings for an IBay or in FTP where the user can ftp content up to the server, but then does not have the right to remove it.  So Write but not Delete/Destroy or even modify.

Is this possible?

Thanks
......

Muzo

FTP and Ibay permissions
« Reply #1 on: February 06, 2004, 09:49:06 AM »
Hi,

I just read your post.

Yes you can do that, but to do this, you'll must modify your proftp.conf templates.

Take a look at proftpd documentation.

You'll must modify <LIMIT> context and denyAll some command line.

I have an exemple somewhere, with good expalnations. I'll post it later.

Stay tuned.

Muzo

FTP and Ibay permissions
« Reply #2 on: February 07, 2004, 01:53:38 AM »
Here is an example i found :
Code: [Select]

<Anonymous your_directory>
   ...
   ...
  <Directory incoming>
    <Limit RMD DELE SITE_CHMOD RNFR>
      DenyAll
    </Limit>
    <Limit CWD MKD STOR RETR STAT>
      AllowAll
    </Limit>
  </Directory>
  <Directory incoming/*/*>
    <Limit MKD RNFR DELE RMD SITE_CHMOD>
      DenyAll
    </Limit>
    <Limit CWD RETR STAT>
      AllowAll
    </Limit>
  </Directory>
</anonymous>

#Okay, all of the mess above is really pretty simple.  The first Limit
#directive says "You can't remove files or directories in /incoming."  
#The second Limit permits users to create directories, change into them,
#and up/download files to or from this directory or any created in it.
#The third Limit says that in directories created _in_ /incoming, you may not
#create any more directories, nor as before, remove files or directories.  The
#final Limit statement says that it is fine to change into directories created
#in /incoming and also to download files from them.


Remember, it's an example. I never test it on SME.