I think the normal behaviour is only ACL on /my/private/path should be taken into account to manipulate and add content in /my/private/path/ I never checked here if our problem came from client or slide, we just soluced it by adding read permission on all elements on path :)
Messages from logs should contains additionnal info (like 'permission /action/write denied on /my/private/path/ for user john') Le Lundi 27 Juin 2005 16:53, Thomas Bellembois a écrit : > Hello, > > We were thinking about something like that. But I can not find any > webdav request on parent directories in the server logs. > And how can we do to : > Deny read and write for all on /my and /my/private and just grant read > and write on /my/private/path just for one user ? > > Thomas > > delbd wrote: > > >Hello, > > > >ACLs are evaluated in this order: > >1st, local ACL on given node > >2nd, ACL of parent > >3rd ACL of parent's parent > >4rd ...aso > > > >Getting the security error message from the log file of your server may be > >usefull, > >i suspect your webdav client does a check on /files/partage/. I had this > >problem when trying to > >upload something to /my/private/path using curl, where user had write > >permission to /my/private/path, > >it request the user had also read permision on /my and /my/private too :( > > > >Le Lundi 27 Juin 2005 16:35, Thomas Bellembois a écrit : > > > > > >>Hello, > >> > >>I have a problem trying to put permission on one resource. > >>I have understood that ACL's are evaluated from the top to the bottom. > >>But what about inherited ACL's ? Are they evaluated first ? > >>I could not find this information neither in the RFC or in the mailing > >>list. :-( > >> > >>My problem is that I have the following permissions : > >>/files/partage : deny all all inheritable > >>/files/partage/demoEsup : grant read /users/demoEsup inheritable, grant > >>write /users/demoEsup inheritable > >> > >>And the user demoEsup can not read or write in the folder > >>/files/partage/demoEsup. > >>But if I change the permission on /files/partage into : > >>/files/partage : deny write all inheritable > >>it works... > >> > >>Any idea ? > >> > >>Thank you very much > >> > >>Thomas > >> > >> > >> > > > > > > > > -- David Delbecq Royal Meteorological Institute of Belgium - Is there life after /sbin/halt -p? --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
