Re: how to restrict developers in /var/www/html directory...??

On Wed, Sep 3, 2008 at 3:45 PM, Martin <martin@marcher.name> wrote:

And now for everyone else too,

sorry for the private mail :(

On Wed, Sep 3, 2008 at 9:44 PM, Martin <martin@marcher.name> wrote:

> On Wed, Sep 3, 2008 at 4:26 PM, Sjoerd Hardeman
> <sjoerd@lorentz.leidenuniv.nl> wrote:
>> Why not chowning the dirs to users A,B and C, setting the group to www-data
>> and chmodding the dirs to 640/750?
>> The disadvantage is, of course, that only one developer can have write
>> access to the directory.
>

> why not chowning www-data:devgroup_a and adding www-data to the
> corresponding groups, this way any number of devs can be given access
> to any number of projects while apache is still able to use the
> directory. Personally I think ACLs are the way to go, since my FS of
> choice is XFS those are enabled by default but I think a simple
> remount can enable ACLs on ext3 too, ymmv.
>
> martin
>
>
> --
> http://www.xing.com/profile/Martin_Marcher
>
> You are not free to read this message,
> by doing so, you have violated my licence
> and are required to urinate publicly. Thank you.
>

--
http://www.xing.com/profile/Martin_Marcher

You are not free to read this message,
by doing so, you have violated my licence
and are required to urinate publicly. Thank you.

Thanks for your reply.
I will try to experiment further with permissions.

I have 2 more issues regarding permissions:

1. I have noticed that when i create a new user, that user has the ability to see all other user home directories. How can i stop this ??? So when a new user is created, they can see only their directory and no other user home directory.

2. i use winscp a lot. I have found that i get a lot of write errors on directoires. Has anyone seen this bug ??? If i login as root - i have no issue. But if i assign permission to be able to modify the directory explicit - it does not work. i get write errors and the user is unable to write. But when i flag user,group, and other writeable by all. The user still gets error creating and updating files -- but they are able to update the file anyways.

am i missing something ???
thanks
mjh