Koozali.org: home of the SME Server

Contribs.org Forums => General Discussion => Topic started by: Stuart on July 23, 2008, 07:37:14 AM

Title: Access to uer's ibays.
Post by: Stuart on July 23, 2008, 07:37:14 AM

I have a question about browsing to the user's personal ibays.  I would like a particular user to be able to browse to ALL current and future user's ibays with full permissions.  Can this be done?

Thanks.

Title: Re: Access to uer's ibays.
Post by: cactus on July 23, 2008, 09:44:38 AM

Quote from: Stuart on July 23, 2008, 07:37:14 AM

I have a question about browsing to the user's personal ibays.  I would like a particular user to be able to browse to ALL current and future user's ibays with full permissions.  Can this be done?

Thanks.

How about the admin user?

Title: Re: Access to uer's ibays.
Post by: janet on July 23, 2008, 10:50:54 AM

Stuart

Do you mean this ?
http://wiki.contribs.org/User_homes_admin_access

Title: Re: Access to uer's ibays.
Post by: Stuart on July 24, 2008, 03:19:30 AM

Thanks for responding guys.

Cactus, admin is not able to browse to users home folders over the network.  I tried on a fresh install.

Mary, I searched for ages in the forum and wiki and couldn't find what I was after, then just after I posted I found the exact info on the wiki page you mentioned on another site.

Anyways... it works!

Thanks

Title: Re: Access to uer's ibays.
Post by: Stuart on July 24, 2008, 03:34:09 AM

Next problem...
If a "superuser" with access creates a folder/file in another user's home, the user (whose home folder it is) can't access it.

Can I get around this?

Title: Re: Access to uer's ibays.
Post by: CharlieBrady on July 24, 2008, 03:57:05 AM

Quote from: Stuart on July 24, 2008, 03:34:09 AM

Next problem...
If a "superuser" with access creates a folder/file in another user's home, the user (whose home folder it is) can't access it.

Can I get around this?

No, just don't do that.

Title: Re: Access to uer's ibays.
Post by: Stuart on July 25, 2008, 07:43:18 AM

CharlieBrady,

Can I ask why I shouldn't do that?

I ask because I changed the template fragment to allow it, and I now can.  I'm not being difficult, just your abrupt answer makes me worry that I'll get into trouble.

Stuart

Title: Re: Access to uer's ibays.
Post by: mercyh on July 25, 2008, 06:14:17 PM

I can't tell how familiar you are with Linux file ownership and permissions. (disregard this post if it is too elementry.)

Quote

Can I ask why I shouldn't do that?

Browsing the directory should not be a problem, Changing or adding files should not be done.


Let's say we have a user name Joe and a super user named Bill.

Joe's home folder's files have ownership of joe:joe (this means Joe is set as the user owner and the group owner)

Bill browses to Joe's home folder and wants to give him a copy of the latest song that he just downloaded. Bill creates a file in Joe's folder. The new file has ownership of bill:bill. Unless Joe has rights to Bill's files (which he should never have) Joe will not be able to see the file.

In an Ibay we use the group ownership of the file. Lets say we have an Ibay named Shared tied to a group called music with permissions of group=read, group=write. Bill and Joe are both members of the group:music if Bill drops his downloaded song here it will look like this bill:music, because Joe is also a member of the music group he can read and write the file.