From: Russ Allbery Date: Mon, 29 Jan 2007 19:25:40 +0000 (+0000) Subject: document-fs-setacl-permissions-20070129 X-Git-Tag: BP-openafs-windows-kdfs-ifs~843 X-Git-Url: https://git.openafs.org/?p=openafs.git;a=commitdiff_plain;h=3960a5ff1cfef0c3f6adfe6cf602b8c80078ce7d document-fs-setacl-permissions-20070129 Better document the current state of implicit "a" rights on directories. --- diff --git a/doc/man-pages/pod1/fs_setacl.pod b/doc/man-pages/pod1/fs_setacl.pod index a6e9cdb..ec43702 100644 --- a/doc/man-pages/pod1/fs_setacl.pod +++ b/doc/man-pages/pod1/fs_setacl.pod @@ -263,8 +263,16 @@ and its F subdirectory). =head1 PRIVILEGE REQUIRED The issuer must have the C (administer) permission on the directory's -ACL; the directory's owner and the members of the system:administrators -group have the right implicitly, even if it does not appear on the ACL. +ACL, a member of the system:administrators group, or, as a special case, +must be the UID owner of the top-level directory of the volume containing +this directory. The last provision allows the UID owner of a volume to +repair accidental ACL errors without requiring intervention by a member of +system:administrators. + +Earlier versions of OpenAFS also extended implicit administer permission +to the owner of any directory. In current versions of OpenAFS, only the +owner of the top-level directory of the volume has this special +permission. =head1 SEE ALSO