cc_staff
52
edits
Sharing data: Difference between revisions
no edit summary
No edit summary |
No edit summary |
||
| Line 125: | Line 125: | ||
To allow a single person with username <tt>smithj</tt> to have read and execute permission on the file <tt>my_script.py</tt>, use: | To allow a single person with username <tt>smithj</tt> to have read and execute permission on the file <tt>my_script.py</tt>, use: | ||
<source lang="console"> | <source lang="console"> | ||
[ | [ someuser@server ]$ setfacl -m u:smithj:rx my_script.py | ||
</source> | </source> | ||
| Line 131: | Line 131: | ||
To allow read and write access to everything within a certain directory (for example ''/home/smithj/projects/def-smithj/shared_data'') for particular group (for example ''wg-datasharing''), use the following commands: | To allow read and write access to everything within a certain directory (for example ''/home/smithj/projects/def-smithj/shared_data'') for particular group (for example ''wg-datasharing''), use the following commands: | ||
<source lang="console"> | <source lang="console"> | ||
[ | [ someuser@server ]$ setfacl -d -m g:wg-datasharing:rwx /home/smithj/projects/def-smithj/shared_data | ||
[ | [ someuser@server ]$ setfacl -R -m g:wg-datasharing:rwx /home/smithj/projects/def-smithj/shared_data | ||
</source> | </source> | ||
First command sets default access rules to directory <code>/home/smithj/projects/def-smithj/shared_data</code>, so any file or directory created within it will inherit the same ACL rule. It is required for '''new''' data. | First command sets default access rules to directory <code>/home/smithj/projects/def-smithj/shared_data</code>, so any file or directory created within it will inherit the same ACL rule. It is required for '''new''' data. | ||
| Line 144: | Line 144: | ||
How do you achieve these three requirements? | How do you achieve these three requirements? | ||
<br />1. Send email to [mailto:support@computecanada.ca support@computecanada.ca] requesting creation of data sharing group, indicate name of the group you would like to have and that you should be the owner. | <br />1. Send email to [mailto:support@computecanada.ca support@computecanada.ca] requesting creation of data sharing group, indicate name of the group you would like to have and that you should be the owner. | ||
<br />2. When you receive confirmation from Compute Canada Support that the group has been created, go to [https://ccdb.computecanada.ca/services/ ccdb.computecanada.ca/services/] and access it: | <br />2. When you receive confirmation from Compute Canada Support that the group has been created, go to [https://ccdb.computecanada.ca/services/ ccdb.computecanada.ca/services/] and access it:<br /> | ||
[[File:Cc services screen.png|1036px|Services screen displaying groups you can manage]] | [[File:Cc services screen.png|1036px|Services screen displaying groups you can manage]] | ||
<!--T:22--> | <!--T:22--> | ||
<br />3. Click on the group's name and enter the group management screen: | <br />3. Click on the group's name and enter the group management screen:<br /> | ||
[[File:Cc service management screen.png|1036px|Services screen showing group's owner]] | [[File:Cc service management screen.png|1036px|Services screen showing group's owner]] | ||
<br />4. Add member (Victor Van Doom with CCI vdv-888, for example) to the group as a member: | <br />4. Add member (Victor Van Doom with CCI vdv-888, for example) to the group as a member:<br /> | ||
[[File:Cc service add member success screen.png|1036px|Services screen showing members of the group]] | [[File:Cc service add member success screen.png|1036px|Services screen showing members of the group]] | ||
<!--T:23--> | <!--T:23--> | ||
<br />5. Make sure that <code>/home/smithj/projects/def-smithj</code> can be traversed by anyone, that is, ensure it has execute permission turned on: | <br />5. Make sure that <code>/home/smithj/projects/def-smithj</code> can be traversed by anyone, that is, ensure it has execute permission turned on: | ||
<source lang="console"> | |||
[ someuser@server ]$ chmod o+X /home/smithj/projects/def-smithj | |||
</source> | |||
If you cannot execute this command due to lack of permissions, you should either contact owner of <code>def-smithj</code> directory (usually it is your PI) or contact [mailto:support@computecanada.ca support@computecanada.ca] | |||
<br />6. Add the new group to the access control list (ACL) for the directory: | <br />6. Add the new group to the access control list (ACL) for the directory: | ||
<source lang="console"> | |||
[ someuser@server ]$ setfacl -d -m g:wg-datasharing:rwx /home/smithj/projects/def-smithj/shared_data | |||
[ someuser@server ]$ setfacl -R -m g:wg-datasharing:rwx /home/smithj/projects/def-smithj/shared_data | |||
</source> | |||
</translate> | </translate> | ||