cc_staff
318
edits
No edit summary |
No edit summary |
||
Line 206: | Line 206: | ||
$ setfacl -R -m u:smithj:rwX /home/<user>/projects/def-<PI>/shared_data | $ setfacl -R -m u:smithj:rwX /home/<user>/projects/def-<PI>/shared_data | ||
</source> | </source> | ||
; Note: The X attribute above (compared to x) sets the "execute" permission only when the item is already executable (either a directory or a file with the execute permission). A directory | ; Note: The X attribute above (compared to x) sets the "execute" permission only when the item is already executable (either a directory or a file with the execute permission). A directory needs the execute permission to allow it to be browsed. | ||
<!--T:28--> | <!--T:28--> | ||
Line 215: | Line 215: | ||
* The directory, <code>/home/smithj/projects/def-smithj/shared_data</code> in our example, must be owned by you. | * The directory, <code>/home/smithj/projects/def-smithj/shared_data</code> in our example, must be owned by you. | ||
* Parent directories (and parents of parents, etc.) of the one you are trying to share must allow execute permission to the user you are trying to share with. This can be supplied with <code>setfacl -m u:smithj:X ...</code> in this example, or it can be supplied by allowing everyone entry, i.e. <code>chmod o+x ...</code>. They do not need to have public read permission. In particular you will need to grant execute permission on the project directory (<code>/projects/def-<PI></code>) either for everyone, or one-by-one to all the people you are trying to share your data with. | * Parent directories (and parents of parents, etc.) of the one you are trying to share must allow execute permission to the user you are trying to share with. This can be supplied with <code>setfacl -m u:smithj:X ...</code> in this example, or it can be supplied by allowing everyone entry, i.e. <code>chmod o+x ...</code>. They do not need to have public read permission. In particular you will need to grant execute permission on the project directory (<code>/projects/def-<PI></code>) either for everyone, or one-by-one to all the people you are trying to share your data with. | ||
==== Removing ACL ==== | |||
To remove all extended ACL attributes from a directory recursively, use: | |||
<source lang="console"> | |||
setfacl -bR /home/<user>/projects/def-<PI>/shared_data | |||
</source> | |||
=== Data Sharing Groups === <!--T:30--> | === Data Sharing Groups === <!--T:30--> |