Hello,

We were thinking about something like that. But I can not find any webdav request on parent directories in the server logs.
And how can we do to :
Deny read and write for all on /my and /my/private and just grant read and write on /my/private/path just for one user ?

Thomas

delbd wrote:

Hello,

ACLs are evaluated in this order:
1st, local ACL on given node
2nd, ACL of parent
3rd ACL of parent's parent
4rd ...aso

Getting the security error message from the log file of your server may be usefull, i suspect your webdav client does a check on /files/partage/. I had this problem when trying to upload something to /my/private/path using curl, where user had write permission to /my/private/path, it request the user had also read permision on /my and /my/private too :(

Le Lundi 27 Juin 2005 16:35, Thomas Bellembois a écrit :
Hello,

I have a problem trying to put permission on one resource.
I have understood that ACL's are evaluated from the top to the bottom. But what about inherited ACL's ? Are they evaluated first ? I could not find this information neither in the RFC or in the mailing list. :-(

My problem is that I have the following permissions :
/files/partage : deny all all inheritable
/files/partage/demoEsup : grant read /users/demoEsup inheritable, grant write /users/demoEsup inheritable

And the user demoEsup can not read or write in the folder /files/partage/demoEsup.
But if I change the permission on /files/partage into :
/files/partage : deny write all inheritable
it works...

Any idea ?

Thank you very much

Thomas




--
+---=(    Thomas Bellembois    )=---+
| CRI - University of Rennes 1 - FR |
| [EMAIL PROTECTED] |
| +33 2 23 23 69 60                 |
+-----------------------------------+


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to