1 fs listacl AFS Commands fs listacl
6 fs listacl -- show access control list.
10 fs listacl [-path <dir/file path> ] [-help]
12 ACCEPTABLE ABBREVIATIONS/ALIASES
15 fs la [-p <dir/file path> ] [-h]
19 Displays the access control list (ACL) associated with each
20 directory. It is legal to provide a filename rather than a
21 directory name for directory, in which case the ACL of the
22 file's parent directory is displayed (because it is not
23 possible to set an ACL for an individual file, the file is
24 inheriting the ACL from its parent directory). Omit this
25 switch to display the ACL of the current working directory.
27 Users who possess the ADMINISTER right on an ACL may change
28 the ACL with the fs setacl command or copy the ACL from a
29 different directory to it with the fs copyacl command.
33 The appearance of a user/group on the Negative rights list
34 does not guarantee that the person is denied those rights.
35 If system:anyuser is granted any rights on the Normal rights
36 list, a user need only unlog to obtain those rights.
40 -path specifies each file and/or directory for
41 which to display the associated ACL. If
42 this argument is omitted, the output
43 displays the ACL associated with the current
44 working directory. If it is a filename, the
45 ACL displayed is associated with the file's
48 -help prints the online help entry for this
49 command. Do not provide any other arguments
50 or flags with this one. See section 3.1 in
51 the Reference Manual for more details.
55 The first line of the output names the directory associated
56 with the access control list. If the issuer used shorthand
57 notation (such as "." for the current directory) when
58 indicating the directory, it may appear here rather than the
59 full pathname of the directory.
63 The "Normal rights:" header indicates the list of users who
64 have normal rights to the directory. Each following line
65 lists a user/group name and the set of rights the user/group
66 may exercise. The possible rights and their meanings are
69 - r = READ the contents of files in the directory
71 - w = WRITE (modify) the contents of files in the
74 - l = LOOKUP status information about the files in
77 - d = DELETE files from the directory
79 - i = INSERT new files into the directory
81 - k = LOCK; set read or write locks on the files in
84 - a = ADMINISTER; change the rights on the access
87 - A, B, C, D, E, F, G, H; by default, these have no
88 meaning to AFS server processes. Administrators
89 and application programs may assign meanings to
90 them and place them on ACLs to control access to
91 the directory's contents in new ways. The letters
94 A "Negative rights:" header may appear next, if any negative
95 rights have been specified for this directory. The format
96 of this list is the same as that of the Normal rights list.
97 The difference is that the user(s)/group(s) listed are
98 denied rather than granted the specified rights.
102 The following displays the ACL associated with user pat's
103 home directory and its private subdirectory when the
104 fs listacl command is issued in the home directory:
106 % fs la . private Access list for . is Normal rights:
107 system:authuser rl pat rlidwka pat:friends rlid
108 Negative rights: smith rlidwka
110 Access list for private is Normal rights: pat rlidwka
116 To issue this command with a directory name argument, issuer
117 must have the LOOKUP right on the directory's ACL. To issue
118 command with a filename argument, the issuer must have both
119 the LOOKUP and READ rights on the ACL of the file's parent