i administer a Mac OS X machine at work, and my team is all connected to it via samba or "windows file sharing."
We have several web applications on there, and it is important that everyone is able to see and edit files, which they can untill I get on the console and create a directory or file from the gui.
Here is the problem: Although I can set it up so that the connected users create files with group write access, apple's usage of the 'staff' and 'admin' groups messes it up since the samba users are creating files as 'admin.'
When i get on the machine at the gui, i am in group 'staff' so cannot edit 'admin' files - even though it has group access, until i manually change the permissions.
also, if I create anything from the gui, it is created as group staff, and does not have group access - umask apparently does not affect gui actions. I have umask set for 022, so if i create something from the CLI, it is fine and dandy since it is created as group 'admin' with group access.
I think one solution would be to have access to change the create mode for gui actions, as well as the group. Is there a way to do this?
Another solution might be to take the team user (there is only one user which everyone uses) out of the group 'admin' so everything is created as 'staff,' but then when i create something from the cli it will be 'admin.'
anyone still with me at this point?
Top