I need to find the optimal permissions layout for the following use case:

There is a AIX machine used for collaborating on software projects.

  • Each project has its own sub-directory.

  • For each project, two type of users exist. Call them "type A" and "type B".

  • Users of type A and of type B have their own sub-directories.

  • Type-A users needs to be able to write in its own directory. Any files and folders created there must be modifiable only by them.

  • Team B needs to be able to write in its own directory like ; in addition, it must be able to see and read the content of type-A users sub-directory, without being able to modify it.

The question is, can this be done with standard UNIX tools (i.e. nothing but the system tools available in a basic AIX installation -- no git, no svn, etc), without using ACL and without having to modify the umask?

My attempt would be to create three distinct groups:

  • one for the projects given to users in teams A and B to grant them access to the project itself and exclude other users (permissions on the project folder would be set to drwxr-x---);
  • One for team A for its directory, where the permission would be set to drwxrwxr-x;
  • One for team B for its directory, permissions drwxrwx---;

And then to set the *setgid * in team A's and B's folders to insure that files and sub-directories inherit the correct group ownership regardless of the users' primary group.

  • What is the type of work that the different types of users need access for doing? Could it be solved by using git or some other similar collaboration framework? I'm thinking you wouldn't need to give direct access for the users at all as they could work on personal git repository clones elsewhere. – Kusalananda May 26 at 9:40
  • git would be the optimal solution probably, but external software is not an option. – lambda_vu May 26 at 9:42
  • What Unix are you using and what distribution of tools would you consider "not external"? – Kusalananda May 26 at 9:45
  • I added the info to the question. It's an AIX machine, and I would assume that nothing can be installed on it so this would need to be done working with OS administrative tools that I can assume are always available, such as chmod, chgrp and the like. – lambda_vu May 26 at 9:51
  • So, you don't have "AIX Toolbox for Linux Applications" installed? – Kusalananda May 26 at 9:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.