Subject: Re: Strange permission (denied) problem
From: andrew morgan (morgan@orst.edu)
Date: Sun Mar 19 2000 - 20:07:42 EST
On Sun, 19 Mar 2000, Ove Ruben R Olsen wrote:
> In the home-directory there are 2 sub-directories: "Private files" and
> "Webfiles".
>
> If one of the users try to drag a local directory with contents (files of
> other
> directories) into "Private files" or "Webfiles" they receive an error
> "Can not write to Webfiles due to insuffient rights" (translated from
> norwegian MacOS). The funny thing is that the name of the local directory
> is indeed created in the sub-directory on the server, but there are no
> files tranferred into the new sub-directory.
>
> Trying to create a new sub-directory inside "Webfiles" or "Private files"
> produce the same kind of error.
>
> Dragin files into one of these directories produces no errors.
>
> These error happens regardless of version of MacOS.
> These error happens regardless of if the users home-directory permissions
> is set to 755 instead of 555.
>
> Those two directories ("Webfiles" and "Private files") have 755 as modes
> and are owned by the respective users.
>
> /var/log/messages gives Mar 19 23:07:09 localhost afpd[1943]: afp_openfork:
> ad_open: Permission denied
It looks like the permissions on the .AppleDouble directory inside of
Webfiles or Private files are too restrictive. On my system, these
directories are set 711 and the files inside them are set 600. There is
also the .AppleDesktop directory, which is in each user's home directory
and is set to 711 permissions.
> The reason for this setup is that we do not want users to create or copy
> files directly
> into their home-directory.
This should work fine as long as the .Apple* directories are set to allow
the owner write access, but the actual directories containing data aren't
set to allow owner write access.
Andy
This archive was generated by hypermail 2b28 : Wed Jan 17 2001 - 14:30:16 EST