I need to find the optimal permissions layout for the following use case:
There is a AIX machine used for collaborating on software projects.
Each project has its own sub-directory.
For each project, two type of users exist. Call them "type A" and "type B".
Users of type A and of type B have their own sub-directories.
Type-A users needs to be able to write in its own directory. Any files and folders created there must be modifiable only by them.
Team B needs to be able to write in its own directory like ; in addition, it must be able to see and read the content of type-A users sub-directory, without being able to modify it.
The question is, can this be done with standard UNIX tools (i.e. nothing but the system tools available in a basic AIX installation -- no
svn, etc), without using ACL and without having to modify the
My attempt would be to create three distinct groups:
- one for the projects given to users in teams A and B to grant them access to the project itself and exclude other users (permissions on the project folder would be set to
- One for team A for its directory, where the permission would be set to
- One for team B for its directory, permissions
And then to set the *setgid * in team A's and B's folders to insure that files and sub-directories inherit the correct group ownership regardless of the users' primary group.