I don’t understand why not having permission(s) doesn’t prevent the user from writing into the fileset...
As described, your case is about not wanting userA to be able to write to a fileset if userA isn’t in some groups. Don’t put them in those groups. That’s not even Spectrum Scale specific, it’s about generic *nix permissions. What am I missing? I don’t understand why you would want to use quota to enforce permissions. (There could be a legitimate reason here, but I don’t understand it.) Liberty, -- Stephen Ulmer Sent from a mobile device; please excuse autocorrect silliness. > On Dec 3, 2017, at 10:49 PM, IBM Spectrum Scale <[email protected]> wrote: > > Hi Keith, > > You can use ACLs for fine grained permissions. A quota limit of 0 in GPFS > implies no limits. > > Regards, The Spectrum Scale (GPFS) team > > ------------------------------------------------------------------------------------------------------------------ > If you feel that your question can benefit other users of Spectrum Scale > (GPFS), then please post it to the public IBM developerWroks Forum at > https://www.ibm.com/developerworks/community/forums/html/forum?id=11111111-0000-0000-0000-000000000479. > > > If your query concerns a potential software error in Spectrum Scale (GPFS) > and you have an IBM software maintenance contract please contact > 1-800-237-5511 in the United States or your local IBM Service Center in other > countries. > > The forum is informally monitored as time permits and should not be used for > priority messages to the Spectrum Scale (GPFS) team. > > > > From: Keith Ball <[email protected]> > To: [email protected] > Date: 12/04/2017 08:19 AM > Subject: [gpfsug-discuss] Smallest block quota/limit and file > quota/limit possible to set? > Sent by: [email protected] > > > > From: Keith Ball <[email protected]> > To: [email protected] > Cc: > Bcc: > Date: Sun, 3 Dec 2017 16:13:13 -0500 > Subject: Smallest block quota/limit and file quota/limit possible to set? > HI All, > > We have a system where all users have their own private group as well. > However, for a given fileset (we are using --perfileset-quota), we would like > to ONLY allow users who also belong to just a few central groups to be able > to write to the fileset. > > That is, user "userA" has its own "groupA", but we only want the user to be > able to write to the fileset if: > - userA belongs to one of the groups (e.g. group1, group2, group3) that have > explicitly set quotas > - The group(s) in question are within quota/limits. > > In general, we do not want any users that do NOT belong to one of the three > groups with enabled quotas to be able to write anything at all to the fileset. > > Is there a way to set a ZERO quota for block/file in GPFS, that means what it > actually should mean? i.e. "Your limit is 0 file = you cannot create files in > this fileset". Creating some kind of "supergroup" owner of the fileset (with > entitled users as members of the group) could work, but that will only work > for *one* group. > > If we cannot set the block and file limits to zero, what *are* the smallest > block and fie limits? In GPFS 3.5, they seem to be 1760MB for block. Is there > a smallest quota for files? (blocksize is 16MB, which will be reduced to 4MB > probably, in a subsequent cluster). > > Many Thanks, > Keith > > > > -- > Keith D. Ball, PhD > RedLine Performance Solutions, LLC > web: http://www.redlineperf.com/ > email: [email protected] > cell: 540-557-7851_______________________________________________ > gpfsug-discuss mailing list > gpfsug-discuss at spectrumscale.org > https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=IbxtjdkPAM2Sbon4Lbbi4w&m=N0b8UJpG1zFuuQjvCE1SaaIG2EUDv4v783wDc3TbnyM&s=vuNQN4VJonV9nmcTEOKKr-hL2LAWSOUV7HKAQBKWcK4&e= > > > > _______________________________________________ > gpfsug-discuss mailing list > gpfsug-discuss at spectrumscale.org > http://gpfsug.org/mailman/listinfo/gpfsug-discuss
_______________________________________________ gpfsug-discuss mailing list gpfsug-discuss at spectrumscale.org http://gpfsug.org/mailman/listinfo/gpfsug-discuss
