Running custom menu as another user

johnjamesmarsh

Hi,

I have a lot of CGI menu items that I want my users to execute that require more privileges than the user has (such as creating a temporary branch and workarea). I am wondering is there any way I can give the user the permission to do this from a custom menu item. I know I can do it from a workflow but that means starting a custom menu item that starts a workflow that calls a CGI task.

Anyone have any better ideas?

We are using TS 5.5.2 on Solaris 8.

Thanks

John

Migrateduser

Depending on where you want to create a branch, the user has to be master or administrator, correct? So let a master or administrator userid own the custom menu cgi and do a setuid on the owner like
chmod 4775 yourcustommenu.cgi

The script will then execute as the owner now.

And make sure you're calling /iw-bin/yourcustommenu.cgi and not /iw-bin/iw_cgi_wrapper.cgi/yourcustommenu.cgi.

We have scripts that are owned by root, so they are executed as root since some of them need permission to edit the role files, group file etc., but you have to be wary about which scripts can have root permission.

Thanks