home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: comp.os.vms
- Path: sparky!uunet!cs.utexas.edu!sun-barr!ames!nsisrv!kong!dstl86.gsfc.nasa.gov!olson
- From: olson@dstl86.gsfc.nasa.gov (Paul Olson)
- Subject: Re: ACL Problem
- Message-ID: <10NOV199208110726@dstl86.gsfc.nasa.gov>
- News-Software: VAX/VMS VNEWS 1.41
- Sender: news@kong.gsfc.nasa.gov
- Organization: Mission Operations and Data Systems
- References: <00963598.9E30D560.15229@shrsys.hslc.org>
- Date: 10 Nov 1992 08:11 EST
- Lines: 62
-
- In article <00963598.9E30D560.15229@shrsys.hslc.org>, simon@SHRSYS.HSLC.ORG (Alan Simon) writes...
- >I am trying to allow non-privileged users to edit a mail distribution list
- >file. I created an identifier called HNET_MGR, and granted this identifier to
- >the appropriate users. These users are in the uic group [DRA,XXX]. I created
- >ACLs for both the mail distribution list file (ILLTF.DIS) and the directory in
- >which the mail distribution list file is located (SYS$USER0:[MAIL]). Here is
- >the output from DIR/FULL:
- >
- >Directory SYS$USER0:[MAIL]
- >
- >ILLTF.DIS;4 File ID: (21723,2,0)
- >Size: 1/3 Owner: [DRA,ANONYMOUS]
- >File protection: System:RWED, Owner:RWED, Group:RE, World:RE
- >Access Cntrl List: (IDENTIFIER=HNET_MGR,ACCESS=READ+WRITE+EXECUTE+DELETE+
- > CONTROL)
- >
- >Directory SYS$USER0:[000000]
- >
- >MAIL.DIR;1 File ID: (808,1,0)
- >Size: 3/3 Owner: [DRA,ANONYMOUS]
- >File protection: System:RWE, Owner:RWE, Group:RE, World:RE
- >Access Cntrl List: (IDENTIFIER=HNET_MGR,OPTIONS=DEFAULT,ACCESS=READ+WRITE+
- > EXECUTE+DELETE+CONTROL)
- >
- >When these users try to modify ILLTF.DIS using EDIT/TPU, these users can read
- >the file, but get the following EVE error messages when trying to save the file
- >after editing:
- >
- > Error opening SYS$USER0:[MAIL]ILLTF.DIS;4 as output
- > Insufficient privilege or file protection violation
- >
- >With regular system privileges, I can read and write the file with no problem.
- >
- >What am I missing?
- >
-
- There is another ACL you need to add to MAIL.DIR. It is:
-
- (IDENT=HNET_MGR,ACCESS=READ+WRITE+EXECUTE+CONTROL)
-
- The OPTION=DEFAULT ACE is only applicable to files created in the MAIL.DIR
- directory, not the directory file itself. Also, if I remember correctly, the
- new ACE must be placed above the one you've already defined.
-
- >
- >-------------------------------------------------------------------------------
- >Alan Simon simon@hslc.org
- >Associate Director simon@shrsys.hslc.org
- >Health Sciences Libraries Consortium VOICE: (215) 222-1532
- >3600 Market Street, Suite 550 FAX: (215) 222-0416
- >Philadelphia, PA 19104
- >-------------------------------------------------------------------------------
- >
-
- __ Paul J. Olson - VAX Systems Manager & Resident Amiga Addict
- C= /// Voice - 301/286-4246, 301725-5501
- __ /// DECnet- DSTL86::OLSON
- \\\/// Internet - olson@dstl86.gsfc.nasa.gov
- \XX/ Disclaimer: Statements in my messages are wholely my own.
- AMIGA "[the universe originated] as a quantum fluctuation
- of absolutely nothing." - Guth & Steinhardt
-