This is a Clilstore unit. You can link all words to dictionaries.

UNIT 2 Part 4. GRANTING PERMISSIONS 4 ESO

 

 

4. GRANTING PERMISSIONS TO THE GROUPS IN THE FOLDERS

 

 

   INTRODUCTION

 

  Take into account that this first section isn't  the activity yet.  It is meant to show you how to work with the Linux permissions system.

  • Log in the system with your admin user.

  • Open a terminal selecting aplicaciones->accesorios->Terminal

  • Execute the command sudo nautilus, in order to run a file browser with admin privileges

  • Select Equipo in the panel on the left , to place yourself in the linux root folder, and see the whole tree of folders Doble click in the folder Home, and later into   elcabanyal_fruit.
  • Click on the right mouse button to get the contextual menu and select the option propiedades

  • Select the permisos tab

 

 

Notice that there are three sections in the pemissions tab, propietario, grupo y otros. These are the thee level of users  you can grant permissions

Propietario: Permissions granted to the folder owner

Grupo: Permissions granted to the folder main group

Otros: Rest of users

 

The folders permissions are

 

 

 

And the meaning of this permissions are shown in the table below:

 

 

LISTAR

List the folder contents

ABRIR

Open the files in a folder, and also read and write (whenever the user has read and write permissions on those files)

MODIFICAR

Modify files

CREAR/ BORRAR

Create and delete files on a folder

ninguno

NO

NO

NO

NO

 Solo lista los ficheros

YES

NO

NO

NO

 Acceso a los ficheros

YES

Only if the user also has read permissions on that file

Only if the user also has write permissions on that file

NO

 Crea y suprime ficheros

YES

Only if the user also has read permissions on that file

Only if the user also has write permissions on that file

YES

 

Now, get the properties tab of the documento_compartido file in any of the compartido folders.

 

 

 

Notice how the properties window are still regarding to propietario, grupo and otros but the permissions are  slightly different in a file than in a folder.

 

The permissions in a folder The permissions in a file

 

 

 The meaning of this permissions are over a file are

  • Ninguno: Prevent any access to the file

  • Sólo Lectura: The file can be read, but not written.

  • Lectura y escritura: The file can be read and be written.

 

 

   

 

 Now start the real activity.

 

ACTIVITY 1. CHANGE FILES PERMISSIONS ON A FOLDER ONE BY ONE

 

Select the file documento publico  in the folder contabilidad/publico and get its contextual menu clicking on the right mouse button. Then select the properties, and the permissions tab. Now the value the permissions for the otros group is Sólo lectura  Change this value to lectura y escritura using Nautilus in admin mode

 

 

 

 

ACTIVITY 2.  HOW TO MODIFY THE PERMISSIONS ON ALL THE FILES OF A FOLDER AT THE SAME TIME

 

We are going to change the permissions for al the files inside the compartida folder

 

 

 

 

 

 

 

 

ACTIVITY 3 SETTING THE PERMISSIONS TO FULLFILL THE REQUIREMENTS

 

Now we are going to set the exercise requierement for the contabilidad folder. Pay attention because you must make the same for the rest of folders later. We must set the permissions showed in the following tables for the folders inside contabilidad

 

 

DEPARTMENT FOLDERS PERMISSIONS

CARPETA RESTRINGIDA /RESTRICTER FOLDER

 

List folders

Open folders

Modify folders

Create/delete folders

Deptartment Heads

SI

SI

SI

SI

Dept. workers

SI

SI

NO

NO

Rest of workers

NO

NO

NO

NO

 

CARPETA COMPARTIDA/SHARED FOLDER

 

List folders

Open folders

Modify folders

Create/delete folders

Deptartment Heads

SI

SI

SI

SI

Dept. workers

SI

SI

SI

NO

Rest of workers

SI

NO

NO

NO

 

CARPETA PUBLICA/PUBLIC FOLDER

 

List folders

Open folders

Modify folders

Create/delete folders

Deptartment Heads

SI

SI

SI

SI

Dept. workers

SI

SI

SI

SI

Rest of workers

SI

SI

NO

NO

 

 

We have the following list of users (created in part 2)

 

 

Department

Head of department

Department workers

Recursos Humanos

Regina

Renato,Remedios, Reinaldo

Contabilidad

Concepcion

Consuelo, Constantino,Constancio,

Ventas

Ventura

Veronica,Velasco

Gestion administrativa

Gemma

Gerardo, Germán

 

 

We should have the following groups (created in part 3)

 

 

empconta

Consuelo, Constantino, Constancio, Concepcion

emprecushum

Regina, Renato,Remedios, Reinaldo

empventas

Veronica,Velasco,Ventura

empgesadm

Gerardo,German,Gemma

 

STEP 1. CHANGE THE OWNERSHIP AND THE MAIN GROUP IN FOLDERS AND FILES

 

Let's begin changing the ownership of each deparment folder. Keep in mind that a folder is owned by the user who created it.. And you have created all the folders with an admin Nautilus, so, all the folders belong to the ROOT user. In this step we are going to make the heads of department owners of their department folders  and files.

 For instance, to make Concepcion owner of the Contabilidad folder:

 

 

Now Let's change the main group. In contabilidad department the main group must be empconta

 

 

 

SET THE PERMISSIONS IN CABANYAL_FRUIT FOLDER

 

 

 

 

SET PERMISSIONS FOR THE CONTABILIDAD FOLDER

 

 

SET PERMISSIONS IN THE RESTRINGIDA FOLDER

 

FOR THE HEADS OF DEPARTMENT

Remember: the permissions options on the folders were:

 

 

 

CARPETA RESTRINGIDA /RESTRICTER FOLDER

 

List folders

Open folders

Modify folders

Create/delete folders

Deptartment Heads

SI

SI

SI

SI

Dept. workers

SI

SI

NO

NO

Rest of workers

NO

NO

NO

NO

 

 

 

 FOR THE  DEPARTMENT WORKERS

 

 

CARPETA RESTRINGIDA /RESTRICTER FOLDER

 

List folders

Open folders

Modify folders

Create/delete folders

Deptartment Heads

SI

SI

SI

SI

Dept. workers

SI

SI

NO

NO

Rest of workers

NO

NO

NO

NO

 

 

 

 

 FOR THE  OTHER DEPARTMENT WORKERS

 

 

CARPETA RESTRINGIDA /RESTRICTER FOLDER

 

List folders

Open folders

Modify folders

Create/delete folders

Deptartment Heads

SI

SI

SI

SI

Dept. workers

SI

SI

NO

NO

Rest of workers

NO

NO

NO

NO

 

 

 

The final state in this permisssions window must be this

 

 

 

 SET THE FILES PERMISSIONS

 

 

 

Make sure the permissions tab is set as shown in the image below

 

 

 

 

CARPETA COMPARTIDA /SARED FOLDER

 

 

 

CARPETA COMPARTIDA/SHARED FOLDER

 

List folders

Open folders

Modify folders

Create/delete folders

Deptartment Heads

SI

SI

SI

SI

Dept. workers

SI

SI

SI

NO

Rest of workers

SI

NO

NO

NO

 

The Head of department can perform any operation. Set crea y suprime ficheros

 

 

 

 

CARPETA COMPARTIDA/SHARED FOLDER

 

List folders

Open folders

Modify folders

Create/delete folders

Deptartment Heads

SI

SI

SI

SI

Dept. workers

SI

SI

SI

NO

Rest of workers

SI

NO

NO

NO

 

The department workers should be able to list the folder contetns, open and modify files, but they shouldn't be able to create or delete files, so set acceder a los ficheros

 

 

CARPETA COMPARTIDA/SHARED FOLDER

 

List folders

Open folders

Modify folders

Create/delete folders

Deptartment Heads

SI

SI

SI

SI

Dept. workers

SI

SI

SI

NO

Rest of workers

SI

NO

NO

NO

 

The rest of users should only be allowed to list contents, so set listar ficheros

The permissions windows final state must be this shown below

 

Now let's set the files permissions, Select the button Cambiar permisos a los archivos contenidos, and ...

 

 

 

 

CARPETA PÚBLICA /PUBLIC FOLDER

 

 

CARPETA PUBLICA/PUBLIC FOLDER

 

List folders

Open folders

Modify folders

Create/delete folders

Deptartment Heads

SI

SI

SI

SI

Dept. workers

SI

SI

SI

SI

Rest of workers

SI

SI

NO

NO

 

 

END UP THE ACTIVITY

 

ENTREGA DEL TRABAJO

 

 

sudo ls -Rla > /home/fulano/ejercicio3.txt

 

 

Short url:   http://multidict.net/cs/4518