[OpenAFS] Implied 'a' rights?

Neulinger, Nathan nneul@umr.edu
Thu, 26 Jul 2001 09:49:53 -0500


As administrator:
	create volume sw.important-setuid-tools
	mount it somewhere
	create volume users.fred

As fred:
	cd into users.fred (where you have 'a' rights)
	fs mkm neatstuff sw.important-setuid-tools
woohoo - now fred has 'a' rights on sw.important-setuid-tools

The .. refers to the parent directory wherever it is mounted and accessed. 

-- Nathan

> -----Original Message-----
> From: Patrick J. LoPresti [mailto:patl@curl.com]
> Sent: Thursday, July 26, 2001 9:45 AM
> To: Neulinger, Nathan
> Cc: openafs-info@openafs.org
> Subject: Re: [OpenAFS] Implied 'a' rights?
> 
> 
> "Neulinger, Nathan" <nneul@umr.edu> writes:
> 
> > > In my ideal world, having 'a' rights on a directory would
> > > automatically imply 'a' rights to every directory within. 
>  That would
> > > allow us to dish out administrative control from any point in AFS
> > > space all the way down.
> > 
> > It does, but for obvious reasons, it doesn't cross mount points. (It
> > doesn't actually grant the A right, but you can certainly grant it
> > yourself.)
> 
> Forgive me, but I do not see how that is obvious.  Even if a volume is
> mounted in multiple places, the ".." entry in that volume refers to
> *something*; you could allow 'a' rights on that something to imply 'a'
> rights on the volume.
> 
> What am I missing?
> 
>  - Pat
>