Helpful iwchgrp permissions command (TS 6.7.1 on Solaris 10)

System

In my long quest to understand how permissions work in TeamSite, I just used a unix command that may come in handy for some of you.

When we set up a workarea, we share it with a TeamSite group to allow / restrict access and then set the g+s bit on the top level directory of the newly created workarea to try to keep all files and directories in the workarea owned by the same TeamSite group that the workarea is shared with. This works well most of the time, but some processes don't honor these permissions ('copy to area' being one of them).

Occasionally, then, we need to reset permissions on the contents of a workarea. With TeamSite 6.7.1 (on Solaris 10, using TeamSite groups), we can't just run a recursive chgrp to get the desired results. We need to use the iwchgrp CLT and that doesn't have a recursive option (feature request?).

I'm happiest when I don't have to write scripts to do this kind of function, but I was just about to code up a Shell script to recursively call iwchgrp on all the assets in the workarea, when I (with some help) came up with this Unix command line to do the same thing:

find . * | xargs -t -i /interwoven/teamsite/bin/iwchgrp {}

I ran it from the top level of the workarea (substituting the desired TeamSite Group in) and it did the job. The -i option of xargs basically says 'use the array fed to me by find'. Good stuff.

Of course, it'd be better if I never had to run this type of thing in the first place and could ensure that all files / directories within a workarea always retained the correct group permissions (another feature request!)... I'd be happy to hear any suggestions along those lines!

Wally Box
Nike, Inc.

brizrobbo

FYI: I just discovered that the iwaccess CLT 'set-group' option has a recursive function:

options for set-group
[-r]

Change the owning group of the object specified by to the
OS or TeamSite group named by .
If -r is specified, the group is set recursively to sub-folders
when -r option is used, the must include the complete filepath followed by /.
For example, to change the group of all files and folders under a workarea named "MyWorkArea",
to user "NewGroup", you must call iwaccess set-group /WORKAREA/MyWorkArea/. NewGroup -r

The command I used was:

iwaccess set-group /default/main/safari/WORKAREA/content safari -r

...and it worked a treat.

Interestingly, this is not documented in the current CLT Guide, so I wonder if the -r was added as a patch? Anyway...for what it's worth!