In article <[log in to unmask]>,
[log in to unmask] (Michael Jones) writes:
> [log in to unmask] wrote:
> : I'd like to grant selective privileges (RE) on some of my files to my
roommate.
> : His account, however, is in the [MBI] directory while I'm in [SAN]. I've
set
> : the RE protection for group and world on these files (and the subdirectory
that
> : they're in) but he still cannot access them. What else do I need to do? If
at
> : all possible, I'd like to keep these files physically in my account and
only
> : allow him read and execute privileges. Any help would be appreciated...
>
> You need to also grant privileges on your home directory.
> Type this from your login directory:
>       set prot=(w:e) [-]dmtussey.dir
>
> This will allow your settings on subdirectories and files underneath
> your home directory to take effect, but will not allow anyone
> to see what's in your home directory, or access anything in your home
> directory that is not set group/world read, write, or execute.
 
Actually, you can grant access to only one individual rather than the
whole world.  Use the following command (rather than the one above) to
grant access to just your roommate:
 
    $ SET FILE/ACL=(ID=roomate's_userid,ACCESS=READ+EXECUTE)
 
> Unlike UNIX, in VMS a user has to have access to the entire directory
> tree (so make sure all directories from your home directory down to the
> final directory have at least execute privileges).
 
Actually, this only works on the NeXTs.  I'd personally call this a
secruity "hole".  This does not work on Ultrix, AIX, or OSF/1.
 
--
                                     Kent Covert, Software Coordinator
                                     Miami Computing and Information Services
                                     Miami University, Oxford, OH
                                     [log in to unmask]  (internet)
                                     kacovert@miavx1                 (bitnet)