Re: how to restrict developers in /var/www/html directory...??

[Joris Dobbelsteen <joris@familiedobbelsteen.nl>]

Consider using ACLs.

I think this is really the only way. Only Linux user-level tools support 
for it lacking (though it works perfectly).

What I was trying locally is having the files owned by the user & its 
group. An ACL (+ default ACL) adds access for the www-data group, so the 
web server has (read) access. Users are NOT a member of the www-data group.

Personally I think Windows ACLs are a lot easier to control and manage.

- Joris

Michael Habashy wrote, On 2-Sep-2008 22:18:
> i would like to restrict developer access to the /var/www/html directory.
> I currently have a number of websites in that directory.  They are all
> live public_html for their respective webpages.
> I have developer A who i want to give access to /var/www/html/a-website.com
> I have developer B who i want to give access to /var/www/html/b-website.com
> I have developer C who i want to give access to /var/www/html/c-website.com
>
>
> how can i do this..while having the website functional ???
>
> I have given access to rwx to A and www-data.
> by having A in the group www-data.
>
> But i also have B in the same group www-data.
>
>
> so A can modify B's files and B can modify A';s files.
>
> How can restrict access so this is not an issue ???
>
> But i also need to give www-data access to these files..so they can
> serve the web pages to the public.
>
> thanks...
>  mjh