Shared folder Posix ACL snapshots

[davidep (Davide Principi)]

Continuing the discussion from Create a new sharedFolder UI plugin for WEB Settings:

Create a new sharedFolder UI plugin for WEB Settings

If a file named .http_writable (or similar) exists in the shared folder, it is parsed to apply special write permissions for the web server.

The .http_writable would contain a list of sub directories (relative to shared folder) where the web server is allowed to write. This is to cover situations where a web app needs to write some data on the disk. And it’s also compatible with the “Reset permissions” action.

What do you think?

One limitation of the current handling of Posix ACLs in the Shared Folder page is the “Reset permissions” action.

If there were some special permissions set by a Windows network client through Samba, “Reset permissions” clears them. Only default permissions and settings from ACL tab are retained.

I was wondering if we could add a new feature consisting of

• a new button, Take ACL snapshot, that stores the actual Posix ACL into a file (by running getfacl?)
• restoring Posix ACLs from the snapshot file during “Reset permissions”

The benefit of this new feature is: the admin can shape the permissions at his desire.

[davidep (Davide Principi)]

@giacomo, please review this proposal as this could be related to the other post.

[giacomo (Giacomo Sanchietti)]

“Reset permissions” is needed when the user screws up ACLs from Windows interface.
It should always reset permission on a clean and consistent state.

I like the snapshot feature, but I bet 90% of the sysadmin will forget to take a snapshot when needed
Maybe we can simply document how to do it from the shell.

[alefattorini (Alessio Fattorini)]

We have resolved this issue, now ACLs are never modified editing shared folders properties

File Server / Shared folders module available on NS7

:checkered_flag: The "File Server" module has come back on NS7 and is now ready for testing :relaxed: :clock: RPMs have been pushed also to "nethserver-updates" repository and will be available from mirrors in the next hours Me, @giacomo and @Stll0 worked on the "Shared Folder" page with Virtual Hosts and AD Domain Controller role in mind. These are the results: The "Shared folder" page configures only Samba shares; the "Web access" panel has been moved to the (work in progress) "Virtual …