3 pts_setfields - Sets privacy flags or quota for a Protection Database entry
10 B<pts setfields> S<<< B<-nameorid> <I<user or group name or id>>+ >>>
11 S<<< [B<-access> <I<set privacy flags>>] >>>
12 S<<< [B<-groupquota> <I<set limit on group creation>>] >>>
13 S<<< [B<-cell> <I<cell name>>] >>> [B<-noauth>] [B<-localauth>]
14 [B<-force>] [B<-help>]
16 B<pts setf> S<<< B<-na> <I<user or group name or id>>+ >>>
17 S<<< [B<-a> <I<set privacy flags>>] >>>
18 S<<< [B<-g> <I<set limit on group creation>>] >>> S<<< [B<-c> <I<cell name>>] >>>
19 [B<-no>] [B<-l>] [B<-f>] [B<-h>]
26 The B<pts setfields> command sets the group-creation quota, the privacy
27 flags, or both, associated with each user, machine, or group entry
28 specified by the B<-nameorid> argument.
30 To examine the current quota and privacy flags, use the B<pts examine>
35 Changing a machine or group's group-creation quota is allowed, but not
36 recommended. The concept is meaningless for machines and groups, because
37 it is impossible to authenticate as a group or machine.
39 Similarly, some privacy flag settings do not have a sensible
40 interpretation. L<OPTIONS> specifies the appropriate settings.
46 =item B<-nameorid> <I<user or group name or id>>+
48 Specifies the name or AFS UID of each user, the IP address (complete or
49 wildcard-style) of each machine, or the name or AFS GID of each machine
50 for which to set privacy flags or group-creation quota. It is acceptable
51 to mix users, machines, and groups on the same command line, as well as
52 names (IP addresses for machines) and IDs. Precede the GID of each group
53 with a hyphen to indicate that it is negative.
55 =item B<-access> <I<privacy flags>>
57 Specifies the privacy flags to apply to each entry. Provide a string of
58 five characters, one for each of the permissions. If this option is
59 omitted, the current setting remains unchanged.
61 Set each flag to achieve the desired combination of permissions. If the
62 following list does not mention a certain setting, it is not
63 acceptable. For further discussion of the privacy flags, see
70 The first flag determines who can use the B<pts examine> command to
71 display information from a user, machine or group's Protection Database
78 Set it to lowercase C<s> to permit the members of the
79 system:administrators group to display a user, machine, or group entry,
80 the associated user to display a user entry, and the owner or members of a
81 group to display the group entry.
85 Set it to uppercase C<S> to permit anyone who can access the cell's
86 database server machines to display a user, machine, or group entry.
92 The second flag determines who can use the B<pts listowned> command to
93 list the groups that a user or group owns.
99 Set it to the hyphen (C<->) to permit the members of the
100 system:administrators group and a user to list the groups he or she owns,
101 or to permit the members of the system:administrators group and a group's
102 owner to list the groups that a group owns.
106 Set it to uppercase letter C<O> to permit anyone who can access the cell's
107 database server machines to list the groups owned by a machine or group
114 The third flag determines who can use the B<pts membership> command to
115 list the groups to which a user or machine belongs, or the users and
116 machines that belong to a group.
122 Set it to the hyphen (C<->) to permit the members of the
123 system:administrators group and a user to list the groups he or she
124 belongs to, to permit the members of the B<system:administrators> group to
125 list the groups a machine belongs to, or to permit the members of the
126 system:administrators group and a group's owner to list the users and
127 machines that belong to it.
131 Set it to lowercase C<m> to permit members of a group to list the other
132 members. (For user and machine entries, this setting is equivalent to the
137 Set it to uppercase C<M> to permit anyone who can access the cell's
138 database server machines to list membership information for a user,
145 The fourth flag determines who can use the B<pts adduser> command to add
146 users and machines as members of a group. This flag has no sensible
147 interpretation for user and machine entries, but must be set nonetheless,
148 preferably to the hyphen.
154 Set it to the hyphen (C<->) to permit the members of the
155 system:administrators group and the owner of the group to add members.
159 Set it to lowercase C<a> to permit members of a group to add other
164 Set it to uppercase C<A> to permit anyone who can access the cell's
165 database server machines to add members to a group.
171 The fifth flag determines who can use the B<pts removeuser> command to
172 remove users and machines from membership in a group. This flag has no
173 sensible interpretation for user and machine entries, but must be set
174 nonetheless, preferably to the hyphen.
180 Set it to the hyphen (C<->) to permit the members of the
181 system:administrators group and the owner of the group to remove members.
185 Set it to lowercase C<r> to permit members of a group to remove other
192 =item B<-groupquota> <I<group creation quota>>
194 Specifies the number of additional groups a user can create (it does not
195 matter how many he or she has created already). Do not include this
196 argument for a group or machine entry.
198 =item B<-cell> <I<cell name>>
200 Names the cell in which to run the command. For more details, see
205 Assigns the unprivileged identity anonymous to the issuer. For more
206 details, see L<pts(1)>.
210 Constructs a server ticket using a key from the local
211 F</usr/afs/etc/KeyFile> file. Do not combine this flag with the
212 B<-cell> or B<-noauth> options. For more details, see L<pts(1)>.
216 Enables the command to continue executing as far as possible when errors
217 or other problems occur, rather than halting execution at the first error.
221 Prints the online help for this command. All other valid options are
228 The following example changes the privacy flags on the group C<operators>,
229 retaining the default values of the first, second and third flags, but
230 setting the fourth and fifth flags to enable the group's members to add
231 and remove other members.
233 % pts setfields -nameorid operators -access S-Mar
235 The following example changes the privacy flags and sets group quota on
236 the user entry C<admin>. It retains the default values of the first,
237 fourth, and fifth flags, but sets the second and third flags, to enable
238 anyone to list the groups that C<admin> owns and belongs to. Users
239 authenticated as C<admin> can create an additional 50 groups.
241 % pts setfields -nameorid admin -access SOM-- -groupquota 50
243 =head1 PRIVILEGE REQUIRED
245 To edit group entries or set the privacy flags on any type of entry, the
246 issuer must own the entry or belong to the system:administrators group. To
247 set group-creation quota on a user entry, the issuer must belong to the
248 system:administrators group.
256 L<pts_membership(1)>,
261 IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.
263 This documentation is covered by the IBM Public License Version 1.0. It was
264 converted from HTML to POD by software written by Chas Williams and Russ
265 Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.