1,090
Hi Everyone,
This is my first entry on this blog that intents to be a place to share and discuss some day-by-day things that we learn on using ClearCase.
Today let me share this:
Today let me share this:
"On CCRC WAN UNIX/Linux (8.0.x) or CM_Server (7.1.2) how could we prevents users to access elements into view stores, since by default
that directories has 775 as permission?"
When using CCRC, a "checked out" process will copy an element in /var/adm/atria/ccweb/<username.domainname>/<view-name>
The above "path is created by root and then changed by root to be owned by the view creator".
that directories has 775 as permission?"
When using CCRC, a "checked out" process will copy an element in /var/adm/atria/ccweb/<username.domainname>/<view-name>
The above "path is created by root and then changed by root to be owned by the view creator".
Given the above we could manually change the permissions on view store paths, see the example below:
1) I changed the users directory permissions (on ccweb) to 750 on
/var/adm/atria/ccweb/
drwxr-x--- 3 john abc 4096 Dec 12 15:58 john.foo.abc
drwxr-x--- 4 maria xyz 4096 Dec 11 13:14 maria.<unknown>
drwxr-x--- 4 paul abc 4096 Dec 12 15:56 paul.<unknown>
#######
Note: For each user on tests below I configure their primary group as
ClearCase Primary Group.
2) Then from a client I logged as john and I was able to:
2.1) Access the John's views.
2.2) Create new views.
2.3) Access and update Paul's views (Note: I used the same client
machine to test the three users).
as expected since Paul belongs to abc group also.
2.4) I could access the maria's views files that were already stored on
the local file system (client machine) however I was not able to
update from the repository and checkouts.
Then I disconnect from Wan Server and closed the client tool.
3) I did the same test above as Paul (accessing John's views also) with
the same results.
4) Using maria account.
4.1) Access the Maria's views.
4.2) Create new views.
4.3) I could access the john and paul's views files that were already
stored on the local file system (client machine) however I was not able
to update from the repository and checkouts.
The problem on this approach is: if you have a new user the directory
will be created as 775 and you need to do the change by hand as
described above.
########################################## Disclaimer ##############################################
"The postings on this site are my own and don't necessarily represent IBM's positions, strategies or opinions."
"The postings on this site are my own and don't necessarily represent IBM's positions, strategies or opinions."
#################################################################################################
