user and groups permissions

[Rafnews]

Hi,

i'm trying to figure out what is the best approach for files and folders 
permissions in case of a shared webserver.

we are 2-3 developers and we have a server on which we installed Fedora 
20 as web server for our development testing purpose.

all websites should be stored in /var/www/html/ directory

now let's say we are 2 devs called: "alain" and "francois" (those
are 
our fedora user accounts.

/var/www/html/ owner is root:root

now what should we do to allow each dev to use FTP and created/delete/ 
modify files and folders to create website structure ?

should we create a group like and add into it devs ?

thx.

A.

[Matthew Miller]

On Tue, Mar 25, 2014 at 02:35:57PM +0100, Rafnews wrote:
>  i'm trying to figure out what is the best approach for files and
>  folders permissions in case of a shared webserver.
>  we are 2-3 developers and we have a server on which we installed
>  Fedora 20 as web server for our development testing purpose.
>  all websites should be stored in /var/www/html/ directory
>  now let's say we are 2 devs called: "alain" and "francois"
> (those
>  are our fedora user accounts.
>  /var/www/html/ owner is root:root
>  now what should we do to allow each dev to use FTP and
>  created/delete/ modify files and folders to create website structure
>  should we create a group like and add into it devs ? 
That's a good idea, particularly at this scale. It's harder when you go up
to dozens of developers.

Change the directory to be owned and writable by the group, and use "chmod
g+s" to set the bit which will make all new files created inside that
directory also owned by that group.


-- 
Matthew Miller    --   Fedora Project    --    <mattdm(a)fedoraproject.org&gt;

[Pittigher, Raymond - Exelis]

Or you can try using FACL

-
Ray Pittigher
--Exelis Inc, Clifton NJ
--phone [phone]
--email raymond.pittigher(a)exelisinc.com
________________________________________
From: users-bounces(a)lists.fedoraproject.org [users-bounces(a)lists.fedoraproject.org] on
behalf of Matthew Miller [mattdm(a)fedoraproject.org]
Sent: Tuesday, March 25, 2014 10:13 AM
To: Community support for Fedora users
Subject: Re: user and groups permissions

On Tue, Mar 25, 2014 at 02:35:57PM +0100, Rafnews wrote:
>  i'm trying to figure out what is the best approach for files and
>  folders permissions in case of a shared webserver.
>  we are 2-3 developers and we have a server on which we installed
>  Fedora 20 as web server for our development testing purpose.
>  all websites should be stored in /var/www/html/ directory
>  now let's say we are 2 devs called: "alain" and "francois"
> (those
>  are our fedora user accounts.
>  /var/www/html/ owner is root:root
>  now what should we do to allow each dev to use FTP and
>  created/delete/ modify files and folders to create website structure
>  should we create a group like and add into it devs ? 
That's a good idea, particularly at this scale. It's harder when you go up
to dozens of developers.

Change the directory to be owned and writable by the group, and use "chmod
g+s" to set the bit which will make all new files created inside that
directory also owned by that group.


--
Matthew Miller    --   Fedora Project    --    <mattdm(a)fedoraproject.org&gt;
--
users mailing list
users(a)lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

________________________________

This e-mail and any files transmitted with it may be proprietary and are intended solely
for the use of the individual or entity to whom they are addressed. If you have received
this e-mail in error please notify the sender. Please note that any views or opinions
presented in this e-mail are solely those of the author and do not necessarily represent
those of Exelis Inc. The recipient should check this e-mail and any attachments for the
presence of viruses. Exelis Inc. accepts no liability for any damage caused by any virus
transmitted by this e-mail.

[Rafnews]

for me ACL includes the user permissions ?


On 25.03.2014 15:25, Pittigher, Raymond - Exelis wrote:
>  Or you can try using FACL
>
>  -
>  Ray Pittigher
>  --Exelis Inc, Clifton NJ
>  --phone [phone]
>  --email raymond.pittigher(a)exelisinc.com
>  ________________________________________
>  From: users-bounces(a)lists.fedoraproject.org [users-bounces(a)lists.fedoraproject.org] on
> behalf of Matthew Miller [mattdm(a)fedoraproject.org]
>  Sent: Tuesday, March 25, 2014 10:13 AM
>  To: Community support for Fedora users
>  Subject: Re: user and groups permissions
>
>  On Tue, Mar 25, 2014 at 02:35:57PM +0100, Rafnews wrote:
> > i'm trying to figure out what is the best approach for files and
> > folders permissions in case of a shared webserver.
> > we are 2-3 developers and we have a server on which we installed
> > Fedora 20 as web server for our development testing purpose.
> > all websites should be stored in /var/www/html/ directory
> > now let's say we are 2 devs called: "alain" and "francois"
> (those
> > are our fedora user accounts.
> > /var/www/html/ owner is root:root
> > now what should we do to allow each dev to use FTP and
> > created/delete/ modify files and folders to create website structure
> > should we create a group like and add into it devs ?
>  That's a good idea, particularly at this scale. It's harder when you go up
>  to dozens of developers.
>
>  Change the directory to be owned and writable by the group, and use "chmod
>  g+s" to set the bit which will make all new files created inside that
>  directory also owned by that group.
>
>
>  --
>  Matthew Miller    --   Fedora Project    --    <mattdm(a)fedoraproject.org&gt;
>  --
>  users mailing list
>  users(a)lists.fedoraproject.org
>  To unsubscribe or change subscription options:
>  https://admin.fedoraproject.org/mailman/listinfo/users
>  Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
>  Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
>  Have a question? Ask away: http://ask.fedoraproject.org
>
>  ________________________________
>
>  This e-mail and any files transmitted with it may be proprietary and are intended solely
> for the use of the individual or entity to whom they are addressed. If you have received
> this e-mail in error please notify the sender. Please note that any views or opinions
> presented in this e-mail are solely those of the author and do not necessarily represent
> those of Exelis Inc. The recipient should check this e-mail and any attachments for the
> presence of viruses. Exelis Inc. accepts no liability for any damage caused by any virus
> transmitted by this e-mail.

[fedora]

if your main concern is FTP access to the web, then i would recommend an 
FTP server, which allows virtual user-ids, such as pure-ftpd. Then,
you could open a new virtual user-id for each project, each web, and 
communicate it to all participants of the project or web.

suomi

On 2014-03-25 14:35, Rafnews wrote:
>  Hi,
>
>  i'm trying to figure out what is the best approach for files and folders
>  permissions in case of a shared webserver.
>
>  we are 2-3 developers and we have a server on which we installed Fedora
>  20 as web server for our development testing purpose.
>
>  all websites should be stored in /var/www/html/ directory
>
>  now let's say we are 2 devs called: "alain" and "francois" (those
> are
>  our fedora user accounts.
>
>  /var/www/html/ owner is root:root
>
>  now what should we do to allow each dev to use FTP and created/delete/
>  modify files and folders to create website structure ?
>
>  should we create a group like and add into it devs ?
>
>  thx.
>
>  A.

[Rafnews]

My concern is not FTP only but also directory access and creation

On 25.03.2014 18:16, fedora wrote:
>  if your main concern is FTP access to the web, then i would recommend
>
>  an FTP server, which allows virtual user-ids, such as pure-ftpd. Then,
>  you could open a new virtual user-id for each project, each web, and 
>  communicate it to all participants of the project or web.
>
>  suomi
>
>  On 2014-03-25 14:35, Rafnews wrote:
> > Hi,
> >
> > i'm trying to figure out what is the best approach for files and folders
> > permissions in case of a shared webserver.
> >
> > we are 2-3 developers and we have a server on which we installed Fedora
> > 20 as web server for our development testing purpose.
> >
> > all websites should be stored in /var/www/html/ directory
> >
> > now let's say we are 2 devs called: "alain" and "francois"
> (those are
> > our fedora user accounts.
> >
> > /var/www/html/ owner is root:root
> >
> > now what should we do to allow each dev to use FTP and created/delete/
> > modify files and folders to create website structure ?
> >
> > should we create a group like and add into it devs ?
> >
> > thx.
> >
> > A.

[Tim]

Allegedly, on or about 25 March 2014, Rafnews sent:
>  i'm trying to figure out what is the best approach for files and
> folders 
>  permissions in case of a shared webserver.
>  
>  we are 2-3 developers and we have a server on which we installed Fedora 
>  20 as web server for our development testing purpose.
>  
>  all websites should be stored in /var/www/html/ directory
>  
>  now let's say we are 2 devs called: "alain" and "francois" (those
> are 
>  our fedora user accounts.
>  
>  /var/www/html/ owner is root:root
>  
>  now what should we do to allow each dev to use FTP and created/delete/ 
>  modify files and folders to create website structure ?
>  
>  should we create a group like and add into it devs ? 
I presume that you want to have those users jointly working on several
websites inside that path, not owning their own websites, individually.

You can create say a "webmaster" user group (the name is arbitrary, but
that example fits tradition), add alain and francois to that group, and
have /var/www/html/ owned by that group (/var/www/html doesn't need to
be owned by root:root).

That takes care of direct access to files (ssh to the server, and
working directly on the same machine).  And, for ftp, you use a server
that can work with group ownerships.

If you're stuck with servers that don't handle groups, then you could
simply have a webmaster username that owns the files and directories,
and have your webmasters ftp into the server using "webmaster" as the
logon name (or any other shared name other than their own).

-- 
[tim@localhost ~]$ uname -rsvp
Linux 3.9.10-100.fc17.x86_64 #1 SMP Sun Jul 14 01:31:27 UTC 2013 x86_64

All mail to my mailbox is automatically deleted, there is no point
trying to privately email me, I will only read messages posted to the
public lists.

George Orwell's '1984' was supposed to be a warning against tyranny, not
a set of instructions for supposedly democratic governments.