nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Access to the iwmount

cgoodall

My apologies if this has been covered, but I couldn't find an answer in DevNet or the manuals...

We're running TeamSite 6.7.1 on Windows 2003. Is there a way to change the default permissions (Everyone) on the iwmount (Y: drive) share? When TeamSite creates the share upon start up, the permissions default back to Everyone.

Thanks!
~Chris

Find more posts tagged with

Comments

Adam Stoller

My apologies if this has been covered, but I couldn't find an answer in DevNet or the manuals...

We're running TeamSite 6.7.1 on Windows 2003. Is there a way to change the default permissions (Everyone) on the iwmount (Y: drive) share? When TeamSite creates the share upon start up, the permissions default back to Everyone.

Thanks!
~Chris

First - don't confuse what Windows shows you with what TeamSite considers "real". Y:\ might say that Everyone has full permissions, but you can't do anything to it - likewise with Y:\default, Y:\default\main, Y:\default\main\STAGING, etc.

Where you need to check permissions is on the workarea root directory.

Second - this problem (if it exists) is generally avoided by making sure you have the webserver_group set correctly in your iw.cfg file and the group it references created in advance of the first reboot during installation.

Thirdly - look at some of the KBs on the support site, like:

There may be others, those are the two I just found doing a quick search there.

cgoodall

Thanks for your response.

Is there any way to apply more restrictive permissions to the iwmount than what exists on the workarea? We're looking to not permit some users to access the server share, thereby forcing them to use the GUI.

Thanks again,
~Chris

Adam Stoller

Thanks for your response.

Is there any way to apply more restrictive permissions to the iwmount than what exists on the workarea? We're looking to not permit some users to access the server share, thereby forcing them to use the GUI.

Thanks again,
~Chris

The share is a share - so you should probably be able to adjust sharing permissions on Y:\ and/or Y:\default the way you would for any other shared folder on a Windows system (I can't say I've done this, and thus cannot say that there aren't any ramifications of doing so, but ...)

cgoodall

It's not quite a normal share. TeamSite creates it anew upon every startup. So any ACL changes made are blown away and the share gets the default permissions.

So, one option would be to create a job that runs after the TeamSite startup and resets the permissions on the share.

Another option would be to firewall the NetBios ports to the PC's I'd like to deny access.

I was just curious if there was a way to accomplish this restriction from within TeamSite.

As always, thanks for your help!

Sincerely,
~Chris

Bhargav Coca

It's not quite a normal share. TeamSite creates it anew upon every startup. So any ACL changes made are blown away and the share gets the default permissions.

So, one option would be to create a job that runs after the TeamSite startup and resets the permissions on the share.

Another option would be to firewall the NetBios ports to the PC's I'd like to deny access.

I was just curious if there was a way to accomplish this restriction from within TeamSite.

As always, thanks for your help!

Sincerely,
~Chris

So basically you want some people not to see some branches or workarea at all. This is not possible, you can restrict a user to not make any changes to a file at any point, but cannot make him not to see it existing. The only logical way i see it through NetBios. I am not sure how secure you are planning to make it but you can always architect a new branch for those set of people/group to access what you classify them to access. As a System Admin you are the master.

Thanks

ISCBorisB

you want some people not to see some branches or workarea...

This is not what cgoodall is wanting. He needs TS OS Share access restrictions

This is not possible...

This is certainly possible, flags are branch_security/workarea_security in the [iwserver] Section of iw.cfg

only [...] way i see it through NetBios

You misunderstood again... NetBios has nothing to do to it, not directly anyway. cgoodall was talking about firewalling certain Port(s) that are used for OS Share Access.

Bhargav Coca

This is not what cgoodall is wanting. He needs TS OS Share access restrictions
This is certainly possible, flags are branch_security/workarea_security in the [iwserver] Section of iw.cfg
You misunderstood again... NetBios has nothing to do to it, not directly anyway. cgoodall was talking about firewalling certain Port(s) that are used for OS Share Access.

My bad, thanks Boris.