1

I have a website running on apache with the web root folder at /var/www.

I have different people managing different aspects of the website.

  • Designers accesses /var/www/images and /var/www/media
  • Developers access /var/www/code
  • A 3rd party outside contractor accesses /var/www/code/3rd_party_code.

The entire /var/www/ is owned by www-data as that is what apache is run as.

Is there any Linux users and/or grouping permission scheme I can use to make sure people are only able to change their parts of the website? Note also there is some overlap. For instance, developers can also see the 3rd party code. Also, designers access different folders (/var/www/images and /var/www/media) and chroot will not work (I think!).

Access will be only via SFTP. I will disable ssh shell access as necessary. This is on Ubuntu 12.04.5 LTS.

Improve this question
2
  • Can you not just use filesystem permissions & ACLs?
    – Andy
    Oct 3, 2015 at 11:59
  • Yes, you can do this using extended ACL
    – Jakuje
    Oct 4, 2015 at 10:46

1 Answer 1

Reset to default
0

Seems like access control lists is exactly what I need. I will read up on this: ACLS in Ubuntu. Thanks Andy and Jakuje.

Improve this answer
1
  • @dr01 "Seems like access control lists is exactly what I need."
    – Michael Mrozek
    Oct 5, 2015 at 14:48

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .