TS Access and Permissions

rob_liem

We've got TS 6.5 SP2 on Unix. Besides the /etc/group file, what other mechanisms determine the access to TS files ? What happens if you create a DCR that belongs to one group, but then, generate a file in a directory that belongs to a different group ?

Adam Stoller

We've got TS 6.5 SP2 on Unix. Besides the /etc/group file, what other mechanisms determine the access to TS files ? What happens if you create a DCR that belongs to one group, but then, generate a file in a directory that belongs to a different group ?

In answer to your second question - if a user is in both groups, the behavior should be transparent. If the user is only in one group and not in the second group it depends on what the full access mode is (e.g.: 666, 664, 660, 644, 640)

If the last bit is 0 - and thus only the owner and group have permissions, then if the user is not the owner or in the group associated with the file, they will should not be able to view or edit the file.

I'll take a leap here and answer a slightly differently phrased issue:
If the group assigned to the workarea is X and the user-1 has a primary group of Y and user-2 has a primary group of Z and neither user is a member of the other user's primary group (though both are members of group X) then by default when either user edits the file the resulting group access on the file will be set to their respective primary group - thereby disabling access for the other user.
This can be fixed on submit by using the submit.cfg file - but that will only fix the permissions when the file is submitted. If the file needs to go through both user's hands before it gets submitted - what do you do?
The answer (for Unix) is to traverse all the directories of the workarea (starting with the workarea root directory) and use chmod g+s, and potentially chgrp group-name on them - this will set things up so that regardless of the user's primary group - and file or directory created within that directory will inherit the parent directory's group ownership.

Now - the above could be a complete tangent to what you were searching for - but your question was kind of vague in terms of what you really wanted to know.