Re: [Proftpd-user] [SPAM] Re: Proftpd with SQL and problem with groups

W dniu 2023-03-12 17:42, TJ Saunders napisał(a):
>> What I wanted to say in previous mail is: ok, that case is working but
>> its not the end of whole case.
>> If you suggesting to set group in folders to first additional groups 
>> of
>> users what will be with others additional groups ?
> 
> Rather than talking about specific SQL table rows and directory
> permissions, then, let's discuss what the overall
> behavior/functionality you are trying to achieve.
> 
> You have multiple users, and each user has a home directory.  You want
> some of those users to be able to access other users' directories.  A
> given directory/file can belong to only one group, not multiple
> groups.  Users can belong to multiple groups.
> 
> So if you want a given user to be able to access another user's
> directory, then that user needs to be a member of the group which owns
> that directory.  And these groups do not all have to be the same.
> 
> Here's an example:
> 
>   user A belongs to group1, group2, group3
>   user B belongs to group2
>   user C belongs to group3
> 
>   /srv/ftp/A is owned by user A, group1 and has 770 permissions
>   /srv/ftp/B is owned by user B, group2 and has 770 permissions
>   /srv/ftp/C is owned by user C, group3 and has 770 permissions
> 
> With this setup, user A can access all 3 directories, since user A
> belongs to group1 (for /srv/ftp/A access), to group2 (for /srv/ftp/B
> access), and to group3 (for /srv/ftp/C access).  User B and user C can
> only access their own directories.
> 
> There is no "first additional groups" requirement; the ordering of the
> groups does not matter.
> 
> Hope this helps,
> TJ

That explanation of principle of work of groups in Proftpd on the 
begining of this discussion would manage whole this issue right away.

Conclusions are:
1. Proftpd nothing's change in managing of groups. I mean groups still 
work only according to Linux perspective and thats it.
I thought Proftpd also checks virtual groups and gives persmissions or 
not - but no.

2. Application which I use (Proftpd Admin) also isn't written well 
because as I see don't put users to groups correctly to make it work. 
Also it doesn't have in documentation any clear explanation possibly 
what is needed to achieve correct group managing.

So what left for me to achieve my goal ? (creating lots of groups and 
all of them should work). Fixing web app (which I can't) or writing some 
parsing script which will fix groups in Mysql table groups.
OR lastly writing parsing script which will create <LIMIT> sections in 
Proftpd every 10 minutes to respect various groups added to table group 
in Mysql.

On the end.. do you agree with my 2 points of conclusions ?



_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html