From: erik quanstrom <quanstro@quanstro.net>
To: 9fans@9fans.net
Subject: Re: [9fans] permissions
Date: Sun, 17 Oct 2010 19:00:24 -0400 [thread overview]
Message-ID: <f7e06bfc0f8ca2e31d5d776885671e39@plug.quanstro.net> (raw)
In-Reply-To: <b93762966de1d684ad29c8d3b39b2397@bellsouth.net>
> set. In fact, there's no requirement that the intersection of
> the sets be non-empty.
it's typically assumed that the intersection is not empty.
> So for in-kernel file servers, it's best to look at them as hostowner
> and world and forget about groups. For lib9p based servers,
> you can link in a different implementation of hasperm() and
> get whatever permissions checking you want, but the default
> behavior is to assume that the named group has exactly one
> member: the group leader.
that is the current situation. but there is no reason that the
auth protocol can't also inform the local kernel of the groups
a user belongs to. this would tie groups to an auth domain,
rather than a fileserver and would reduce some confusion, i think.
- erik
next prev parent reply other threads:[~2010-10-17 23:00 UTC|newest]
Thread overview: 29+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-10-17 5:35 Benjamin Huntsman
2010-10-17 6:00 ` Skip Tavakkolian
2010-10-17 6:19 ` erik quanstrom
2010-10-17 6:36 ` Benjamin Huntsman
2010-10-17 13:59 ` erik quanstrom
2010-10-17 16:01 ` blstuart
2010-10-17 16:11 ` erik quanstrom
2010-10-17 17:17 ` ron minnich
2010-10-17 18:11 ` Benjamin Huntsman
2010-10-17 18:18 ` erik quanstrom
2010-10-17 19:17 ` blstuart
2010-10-17 19:59 ` Benjamin Huntsman
2010-10-17 20:40 ` blstuart
2010-10-17 21:22 ` Benjamin Huntsman
2010-10-17 22:56 ` erik quanstrom
2010-10-18 9:00 ` Steve Simon
2010-10-18 9:29 ` dave.l
2010-10-18 9:34 ` Bruce Ellis
2010-10-18 11:07 ` Dave Eckhardt
2010-10-18 11:11 ` Bruce Ellis
2010-10-17 22:58 ` blstuart
2010-10-19 18:18 ` Nathaniel W Filardo
2010-10-17 23:00 ` erik quanstrom [this message]
-- strict thread matches above, loose matches on Subject: below --
2001-10-18 14:28 Russ Cox
2001-10-23 20:34 ` Matthew Hannigan
2001-10-24 8:44 ` Douglas A. Gwyn
2001-10-18 14:00 Russ Cox
2001-10-18 14:12 ` Lucio De Re
2001-10-18 13:56 Lucio De Re
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=f7e06bfc0f8ca2e31d5d776885671e39@plug.quanstro.net \
--to=quanstro@quanstro.net \
--cc=9fans@9fans.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).