Re: Administrator question

2012-01-16 Thread Dan

At 5:16 PM -0500 1/16/2012, William Spencer wrote:
Is there a way to create different administrators with different 
levels of access? I have a feeling not but would like to know for 
sure.


In general, there be only normal and super(root).  The latter can do 
anything, of course.


But if you're just looking to limit file access, then you can do 
things with group IDs or even with access control lists...


- Dan.
--
- Psychoceramic Emeritus; South Jersey, USA, Earth.

--
You received this message because you are a member of the iMac Group, a group 
for those using Apple iMacs and eMacs.
The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to imaclist@googlegroups.com
To leave this group, send email to imaclist+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/imaclist


Re: Administrator question

2012-01-16 Thread Bill Spencer
On Monday, January 16, 2012 6:26:00 PM UTC-5, Dan wrote:

 In general, there be only normal and super(root).  The latter can do 
 anything, of course.

 But if you're just looking to limit file access, then you can do 
 things with group IDs or even with access control lists...



The hope is to be able to keep parental controls in place but allow 
software-update-type actions. Bill 

-- 
You received this message because you are a member of the iMac Group, a group 
for those using Apple iMacs and eMacs.
The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to imaclist@googlegroups.com
To leave this group, send email to imaclist+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/imaclist


Re: Administrator question

2012-01-16 Thread Jim Emery
Parental controls can only be applied to a standard account.  Using a standard 
account will not allow you to run software update without an administrative 
username and password. 

Jim

On Jan 16, 2012, at 7:29 PM, Bill Spencer wspen...@jhu.edu wrote:

 On Monday, January 16, 2012 6:26:00 PM UTC-5, Dan wrote:
 In general, there be only normal and super(root).  The latter can do 
 anything, of course.
 
 But if you're just looking to limit file access, then you can do 
 things with group IDs or even with access control lists...
 
 
 
 
 The hope is to be able to keep parental controls in place but allow 
 software-update-type actions. Bill 
 

-- 
You received this message because you are a member of the iMac Group, a group 
for those using Apple iMacs and eMacs.
The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to imaclist@googlegroups.com
To leave this group, send email to imaclist+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/imaclist


Re: Administrator question

2012-01-16 Thread Dan

At 7:29 PM -0800 1/16/2012, Bill Spencer wrote:

On Monday, January 16, 2012 6:26:00 PM UTC-5, Dan wrote:

In general, there be only normal and super(root).  The latter can do
anything, of course.
But if you're just looking to limit file access, then you can do
things with group IDs or even with access control lists...


The hope is to be able to keep parental controls in place but allow 
software-update-type actions.


Parental Controls can only be activated on a normal user account.

If you don't provide the admin id and password, and the user is too 
stoopid to boot into single-user mode, or from an external, or  
then they won't be updating anything.


OTOH,,, why the need for the restrictions?  ...I've never been fond 
of strapping any user down.  Nothing good ever comes from it, IMO. 
Too often, I've had to deal with the carnage of upset parents, when 
they discovered that their children had the gall to first learn how 
to read english, then to use *gasp* Google, and then hack their way 
around the parental controls, nanny products, etc etc etc.  There's 
just no substitutes for building trust and sharing ice cream 
sandwiches.


- Dan.
--
- Psychoceramic Emeritus; South Jersey, USA, Earth.

--
You received this message because you are a member of the iMac Group, a group 
for those using Apple iMacs and eMacs.
The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to imaclist@googlegroups.com
To leave this group, send email to imaclist+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/imaclist