File and Directory permissions in a workarea

Hi All,

I have a workarea, call it "test", whose Group for sharing is "Group A". Group A exists in Active directory.
Now this "Group A", has members, call them "Group B, Group C, Group D and Group E." All these groups exist in Active Directory. TeamSite is integrated with Active directory.

I want to set permissions on my workarea files and directories such that Group B and Group C has full access where as Group D, Group E has only read access. Can please somebody let me know, the best way to implement the above requirement?.

We are using TeamSite 6.5 on Windows 2003 server.

Regards,
Ramam.M

Find more posts tagged with

Comments

stefanmaier

Hi Ramam,
you can change filesystem rights by two different ways:
1. you can change rights through windows GUI (right click on a directory => Properties => Security)
2. you can use the cacls command from windows command line

We also use a related access model.
We changed our rights for all objects within one workarea, not for the workarea directory itself,
because we detected some problems if we reduce the filesystem rights for the Shared Group on the workarea directory.

So, we have this model:

OurWorkareaDir (original shared group righs, unmodified, group a has full access)
|
- oneDir (only read rights for group b)
    |
    - secondDir (modify rights for group b)

We didn't set full access rights but modify rights on "secondDir", because we don't want that "change permission" right is allowed for group b members.
Also we set the access rights for oneDir and secondDir for corresponding directories below templatedata.

Regards
Stefan

Adam Stoller

Initially you will probably have to use the methods described by Stefan to "fix" the access rights - but you really need to RTFM the TeamSite Administrator's Gude regarding the configuration and use of the submit.cfg file.

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com

ramam

Hi fish,

Thanks for your response. I am aware of the fact that, the above requirement can be achieved through submit.cfg. But I would like to know, are there any pitfalls in the above approach? And I would like to know, are there any other ways to achieve the above requirement?

Adam Stoller

I think I understand the problem now:

Workarea shared by group A
--- Group A contains groups B, C, D, and E
--- Members of groups B and C should have "FULL" access
--- Members of groups D and E should have "READ" access

The workarea being shared-by group A is probably correct as far as TeamSite is concerned.

At the filesystem level though - you need to set permissions for groups B, C, D, and E individually -- or possibly just set permissions for group A to be "READ" recursively and then set permissions for B and C, specifically, to "FULL" recursively.

And again - back this up by using the submit.cfg so that the permissions are maintained that way over time.

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com