Re: Are ACLs flawed?

Axel Luttgens <[email protected]> Sat, 3 Mar 2012 17:21:34 +0100
Newsgroups gmane.comp.macosx.admin
Message-ID <[email protected]>
Le 3 mars 2012 à 16:35, Ashley Aitken a écrit :

> 
> Hi All,
> 
> I'm trying to make a dynamic folder hierarchy to share via WebDAV.  I believe directories and files must be readable/writeable by _www to be accessible by WebDAV.
> 
> I was hoping if I set the ACL for the root folder with directory and file inherit everything would be ok but it seems not.  ACLs seem to be problematic because:
> 
> 1. inheritance does not apply to files and directories that already exist in the hierarchy 
> 
> I guess I could apply the acl recursively to all files and folders currently in the hierarchy, but that wouldn't get around the problem that,
> 
> 2. folders and files *moved* into the hierarchy do not inherit the ACLs
> 
> Are ACLs flawed or I am missing something?

Hello Ashley,

Let's say they work as intended. ;-)
ACLs are applied on files/folders at creation time of such items.
Moving an existing item is not creating that item.


> I guess its perhaps a security consideration - just by moving a file into a folder with inherit permissions it shouldn't inherit those, but that's what I want.

Perhaps could you copy the file into its new location and delete the original?

Axel