Default File Permission (maybe umask) for just one SMB Share

Hey Guys,
I have the following Problem:
I'am connecting to my companies Network and Iam mounting an SMB Share smb://192.168.100.3 - everything works fine. But everytime I create a file on the Volume it has the following permissions: -rw-r-r- and my workmates who work on Windows XP Machines can't edit the files because they have no write-permission.
I now found these two solutions:
- http://discussions.apple.com/thread.jspa?threadID=1577373&tstart=0
- http://www.macosxhints.com/article.php?story=20071207091554360
So know, thanks to umask, every file I create gets write-Permission for Group and Everyone. Also on my local harddrive and everywhere I create a file.
Now my question is how to limit this whole umask story only to the mounted Networkshare. Or is there an other way to give writepermissions to my workmates on Windows?
Thanks for your help!
Luke

There's no way to bind a umask to a specific share or mount. And as you've noticed, with the umask change you've made, everything (every user, system process, etc) now creates files using that mask. That's probably not what you want with a permissive mask. (Note, to make this less of a security issue, you can limit the umask change to only your user by using the /etc/launchd-user.conf file instead of the /etc/launchd.conf file).
Assuming the machine you are connecting to is either a Windows server or a Mac, you could just use ACLs within the share. That will give you a lot more granularity and should be relatively quick and easy to set up...

Similar Messages

EAM ID based or Role based? Why settle for just one?

G'Day All,
I've raised a question in the following blog, however I would like to open it up to other people as well so they might get something out of it and in the process might share their own thoughts on the matter at hand.
ID-Based Firefighting vs. Role-Based Firefighting
So this is where I am at this point:
From what I can gather so far, my understanding of EAM ID/ROLE based is as follows:
- Id Based: Logs in using own U.ID and through GRAC_SPM accesess FFID from the GRC Server and logs into the system assigned to them (ECC, SRM, CRM etc)
Only one user at a time can use a FFID.
Firefighter need not exist in every system assigned to them due to central logon however they need to exist in the GRC system
Knows exactly when FFID is being used as he/she has to login so has a psychological effect (good thing)
Better tracking of FF tasks - Specific log reports with Reason Codes. Bonus point from Auditors!
Two Log ins so potential to commit fraud. (1 action using own UserID and 1 action using FFID)
Could be hard to track and find out when a fraud has been committed so can be a problem with auditors.
      ID Based -> GRAC_SPM : TCode for Centralised FFighting -> You will see FFIDs assigned to you
      ID Based -> /n/GRCPI/GRIA_EAM : TCode for DCentralised FFighting -> You can see the FFIDs assigned to you
- Role Based: Logs into the remote system only using U.ID, so everything gets logged against that one ID.
Multiple users can use the FFROLE at once.
Firefighter has to exist in every system assigned to them - so multiple logons.
Hard to differentiate between FF tasks and normal tasks as no login required So easy to slip up
Time consuming to track FF tasks - No Specific log reports. No Reason Codes
     R.Based -> GRAC_SPM : TCode for Centralised FFighting -> You will see FFROLEs
     R.Based -> /n/GRCPI/GRIA_EAM : TCode for DCentralised FFighting -> Not applicable so wont work
So based on this there are pros and cons in both however according to SAP only one can be used. To me personally, it makes more sense to get the best of both the worlds right? So here is my question why can’t we just use both?
    . Really critical tasks -> FFID
    . Normal EAM tasks -> FFRole
Alessandaro from the original post pointed this out:
"Per design it isn't possible to achieve both types of firefighting at the same time. It's a system limitation and hence to configurable."
Well this is what I can't seem to get my head around. For a FFID, there is a logon session so it has to be enabled and as far as I can tell there is no way around it.
However for FFRole, there isn't such limitations/restrictions like starting a separate session. FFRole is just assigned to an end user for him/her to perform those tasks using their own user ID.
So in what way is it different from any of their other tasks/roles, other than the fact that they've got an Owner/Controller assigned to the FFRole? and
What is stopping us from using it when ID based is the default?
If I were to do the following does it mean I can use both ?
    . Config Parameter: 4000 = 1 (GRC System) -> ID Based
    . Config Parameter: 4000 = 2 (Plug-In) - > Role Based
Please excuse me if my logic is a bit silly, Role Based firefighting is only done on Plug-in systems so the following should work just fine:
   . Config Parameter: 4000 = 2 (Plug-In) - > Role Based
However for ID based, it is a Central Logon, so the following is a must:
    . Config Parameter: 4000 = 1 (GRC System) -> ID Based
Which means both ID/Role based can be used at the same time, which seems to be working just fine on my system. Either way I leave it you experts and I hope you will shed some light on it.
Cheers
Leo..

Gretchen,
Thank you for thoughts on this.
Looks like I'm failing to articulate my thoughts properly as the conversation seems to be going in a different direction from what I am after. I'll try once more!
My query/issue is not in regards to if/what SAP needs to do about this or why there isn't more support from Companies/Organizations and not even, which one is a better option.
My query is what is stopping us(as in the end users ) from using both ID/Role based at the same time?
Now before people start referencing SAP documentation and about parameter 4000, humour me with the following scenario please. Again I would like to reiterate that I am still in the learning phase so my logic might be all wrong/misguided, so please do point out to me where I am going wrong in my thought process as I sincerely would like to know why I am the odd one out in regards to this.
Scenario
I've created the following:
FFID
FFROLE
Assigned them to, two end users
John Doe
Jane Doe
I set the Configuration Parameters as follows:
IMG-> GRC-> AC-> Maintain Configuration Settings -> 4000:1 - ID Based
IMG-> GRC (Plug-in)-> AC-> Maintain Plug-In Configuration Settings-> 4000:2 - Role Based
User1
John Doe logs into his regular backend system (ECCPROD001)-> executes GRAC_SPM-> Enters the GRC system (GRCPROD001)-> Because the parameter is set to ID based in the GRC Box, so he will be able to see the FFID assigned to him-> and will be presented with the logon screen-> Logs in -> Enters the assigned system (lets say CRMPROD001) At this point the firefighting session is under progress
User2
Jane Doe logs into her regular backend system (ECCPROD001) -> (can execute GRAC_SPM to check which FF Role has been assigned to her but she can see that in her regular menu, so there is no point) -> Executes the transactions assigned in FFROLEThis is done at the same time while FFID session is in progress
So all I want to know is if this scenario is possible? if the answer is No, then why not?
I physically carried out this scenario in my system and I had no problems(unless I am really missing the plot here), which brings me back to my original question: Why settle for just one?
Again to reiterate I am not getting into the efficacy or merits of this or even if one should use this. Just want to know if it is possible/feasible or not.
So there you have it. That's the whole enchilada(as they say there in Texas). I tried to word my thoughts as concisely as I can, if there are still any clarifications, more information you or anyone else reading this would like, please do let me know.
Regards,
Leo..

I have lightroom. My photos are stored on an external disk drive with a backup disk. With iCloud, will all of my photos go to the cloud? Will I still need the external drives? Is the $9.99 per month for just one year or for always?

I am an amateur photographer and have lightroom. My photos are stored on an external disk drive with a backup disk. With iCloud, will all of my photos go to the cloud? Will I still need the external drives? Is the $9.99 per month for just one year or for always?

If the iTunes database files are on that drive, launch iTunes with the Shift key(Windows) or Option key(Mac OS X) held down, select Choose Library, and navigate to it. The computer may need to be authorized to play protected content, and if the library contains rented movies, those won't play.
If not, import the content to an iTunes library.
(100371)

Spool printing takes a long time for just one user

Hello,
Could someone please guide on what could be the reason that spool printing takes a long time for just one user ?
I've monitored all the spool processes through SM50, and I've found that a very long time elapses before the printing job appears in one of the four spool processes.
Thanks in advance.
Reda

Hi,
very long time elapses before the printing job appears in one of the four spool processes.
can u check the trace file(Red color error) of that spool process. Also can u see if there are any system logs in SM21 related to that spool request.
Also see how many pages the user is giving print @ 1 shot. Suppose if the printer to whcih the user is giving print is a network printer, see the network response time.
Have u tried to ask the same user to give print to some other printer. Also have u asked some other user to print to that problematic printer. Check the responses under this scenario also.
Regards,
Ravi

Import for just one table fails....

Hi,
On production server i have declared a db user , let's call him PRD_USER, with default tablespace PRD_TBL.
On development server i have declared a db user , let's call him PRD_USER, with default tablespace DEV_TBL.
On production server, i use the exp db utility in order to do the import as:
imp system/manager from user=PRD_USER touser=PRD_USER ignore=Y file_name ='....' log='....'.
The import succeeds for about 25 tables and indexes and constraints but it fails for just one table with error : {i do not remember the ORA- error, and i have not access to it right now} tablespace DEV_TBL does not exist.
Of course this tablespace does not exist on production env. but how does this problem arise since the default tablespace for this user is not DEV_TBL but PRD_TBL...????
Do you have the slightest idea what may be the cause and how can i overcome this problem during import...???{Note: I gave a temporary solution... taking the sql creation script of the table leaving out the reference of tablespace 'DEV_TBL'}.
Both servers run exactly the same version of DB..
Note : I use DB 10g v.2
Thank you,
Sim

HI,
"If the table has Partitions, the import is attempting to create the Partitions (in the CREATE TABLE statement) on the original tablespace."
The table is not partitioned.....
I'll check for the second characteristic...(LOB-column on Monday)
Thank you,
Sim

How do I make a transpose/octave button for just one instrument in a split?

I work in mainstage 2.2.2 with patches that are using splits, and I want to make an octave button for just one instruments in a patch. Suggestions? (If I press the octave button in my keyboard, the whole split point moves, no good...)
Benny

An octave button for just one instrument will work for some instruments. EVB3, ESX24, ESM and a few others can be assigned. However I was unable to make it work with EVP88 and ES2. Try this example: in layout mode set up a button(or buttons) on your controller keyboard for changing octaves. In edit mode add a channel strip and select an ESX24 instrument. Select the screen control button you want to assign in the workspace. In the screen control inspector, select the mappings tab. The list below will say unmapped. Double-click on it. Select the instrument in the list. Another list to the right will appear. Select ESX24 (Sampler). In the column to the right, select the pitch folder, then select transpose. To the right, you'll see saved value, button on and button off values. This should get you started. Some of the instruments have different menus, so they'll be a little different. Have fun with it.

How can I turn off imessage for just one of my contacts? Me and my husband just upgraded (both had iphone 4), I got the iphone 5s and he got he note 3. All my text to him automatically send as a imessage. Ive tried to delete his contact and then went back

How can I turn off imessage for just one of my contacts? Me and my husband just upgraded (both had iphone 4), I got the iphone 5s and he got he note 3. All my text to him automatically send as a imessage. Ive tried to delete his contact and then went back in and reentered it but that doesnt work.

Have your husband text the word "stop" to 48369. This should take his number out of the iMessage system.
Go into your settings under messaging and make sure the box to send as an SMS if iMessage is unavailable is checked.
Hopefully this will get your messages sending/receiving to each other.

How do I make a transpose button for just one instrument in a split? (mainstage)

I work in mainstage 2.2.2 with patches using splits and I want to make an octave button for just one instruments in a patch. Suggestions?
Benny

Depending on your virtual instrument you can assign octave to a MIDI control. If you assign all of them to the same control on every track then that would be the effect, but like I said before, it really depends on which instruments you use.

Is it possible to add a user or license for just one app?

I have a complete Adobe Creative Cloud license. Is it possible to add a user or license for just one app? What are the monthly costs?

Cloud Plans https://creative.adobe.com/plans
-and subscription terms http://www.adobe.com/misc/subscription_terms.html

Why cant i use a bought call-tone bought through I-tones for calling tones for just one of my contacts?

Why cant i use a bought call-tone bought through I-tones for calling tones for just one of my contacts?

What makes you believe that you can't? To set a custom ringtone (or SMS tone) for a contact, go to that contact entry, tap the Edit button in the upper right. You can then edit both ringtones and SMS tones for that contact.

Can I sign up for adobe acrobat for just one month?

can I sign up for adobe acrobat for just one month?

That is not clear to me since they only appear to offer Anuual and Prepaid Annual options. You can always go with the free 30 day trial if you haven't already.

Does Apple allow a price reduction for just one week?

Does Apple allow a price reduction for just one week?
I can't seem to get a definitive answer from their web site.
A one week Spring Sale for two books ~ it it OK with Apple?
Thanks
Bruce

Thanks very much vinnvg ~ I was just checking in case Apple had a policy about not allowing a temporary price cut.
Thanks for the reminder on how to do it.
Bruce

Anonymous access for just one page

Does anybody knows how can i enable anonymous access for just one page, other pages must be available for only logged in users.

Actually it is "LightHouse Pro" project. And I don't understand some things in it. It Has a UserControl with a query that just check credentials and returns bool value if credentials are right. But i can't find the way it defines whether i need to secure page or not.

Notifications for just one email account?

hi all.
I have many email accounts, including one that was set up to push time-sensitive email messages to me.
I don't need notifications for any of the accounts except for the time-sensitive account (which is a gmail push account).
does anyone know how to enable Mail Notifications (Lock Screen and Alerts) for just one email account?
cheers,
Gregory

You can't

All my contacts use iPhones but one doesn't use iMessage because it uses data. I want to use iMessage for other contacts but i have to turn off for just one contact. Can i turn iMessage off for just one contact?

All my contacts use iPhones but one doesn't use iMessage because it uses data. I want to use iMessage for other contacts but i have to turn off for just one contact. Can I turn iMessage off for just one contact?

You need to delete here conversation and start another one using her phone number and not her Apple ID. You cannot delete iMessage, you can disable it. If the Apple server still sees her iPod with iMessage on and using her Apple ID, then it will continue to appear to your phone that she has iMessage. She needs to take a look at this support document about permanently disabling iMessage for her account. Can’t receive text messages on a non-Apple phone

Default File Permission (maybe umask) for just one SMB Share

Similar Messages

Maybe you are looking for