Solaris Common Desktop Environment: User's Guide

To Delete an Access Control List Entry

  1. In File Manager, select the icon of the file or folder for which you want to delete an ACL entry.

  2. Choose Properties from the File Manager Selected menu or from the icon's pop-up menu (displayed by pressing Shift+F10 or mouse button 3).

    The Permissions dialog box appears.

  3. Select the entry in the Access Control List Permissions scrolling list that you want to delete.

  4. Click the Delete button.

    A dialog box appears asking you to confirm this deletion. If you delete any of the four required ACL default entries, all ACL default entries will be deleted. See Setting Default Permissions Through an Access Control List for a description of required and optional default ACL entries.


    Note –

    Removing all entries (except Mask) removes the entire Access Control List.


  5. Use the Apply Changes To option button to choose the scope of the change.

    For files, the options are This File Only (default), All Files in Parent Folder, and All Files in Parent Folder and its Subfolders. For folders, the options are This folder only (default) and This folder and its Subfolders.

  6. Click OK to apply the current settings and dismiss the dialog box. Click Apply to apply the settings without dismissing the dialog box.

Setting Default Permissions Through an Access Control List

When you create a file or folder within a folder, it inherits the basic permissions set by the system administrator. (To determine the current defaults, create a new file or folder and then choose Properties from the Selected menu to view the permissions.)

You can use an Access Control List to set default basic permissions yourself for any file or folder that is created within a folder. The ACL for that folder must contain entries for all four of the following required Default entry types: Default Owning User, Default Owning Group, Default Other, and Default Mask. An ACL can contain only one entry of each required type.

The file or folder inherits the values for Owner, Group, and Other from the person who creates it and inherits the basic permissions from the required ACL Default entry types on the containing folder. ACL entries of these types do not have names associated with them.

You can also set optional Default entry types—Default User and Default Group— for any file or folder that is created within a folder. You can create as many Default User or Default Group ACL entries as you want. You must specify the name of the user or group when you create the ACL entry.

Any ACL in which you want to put a Default User or Default Group entry must also contain one of each required entry type.

Example

Suppose that the values for Owner and Group for a user named Carla are otto and otto_staff, respectively. The value for Other (call it otto_other) is everyone at Carla's company except for Carla and the members of otto_staff. Carla creates these required Default ACLs on her folder named Project1:

Any file or folder subsequently placed in the Project1 folder inherits these basic permissions from Project1:

Also, the file or folder has a Mask entry in the Access Control List Permissions scrolling list with the value rw (read, write).

If Carla also adds an optional ACL of type Default User (Default Group) for the Project1 folder, then any file or folder subsequently placed in Project1 will inherit an ACL of type User (Group).

To Set Required Default Entry Types

  1. In File Manager, select the icon of the folder for which you want to set the required ACL Default entry types.

  2. Choose Properties from the File Manager Selected menu or from the icon's pop-up menu (displayed by pressing Shift+F10 or mouse button 3).

    The Permissions dialog box appears.

  3. Click the Show Access Control List button if the folder has no ACL defined.

    If the folder has an ACL defined, it will be visible when you open the Permissions dialog box.

  4. Click Add and select an ACL entry of type Default Owning User, Default Owning Group, Default Other, or Default Mask.

    A message appears reminding you that the other required ACL Default entries will also be added.

  5. Click the Permission check boxes to set the permissions for the Default entry.

  6. Click Add in the Add Access List Entry dialog box.

    The other three required ACL Default entries are automatically created for you, with permissions set to no-read, no-write, no-execute.

  7. (Optional) Change the permissions for the required ACL Default entries that were automatically created in Step 6 above.

  8. Use the Apply Changes To option button to choose the scope of the changes.

    The options are This folder only (default) and This folder and its Subfolders.

  9. Click OK to apply the current settings and dismiss the dialog box. Click Apply to apply the settings without dismissing the dialog box.

To Delete Required ACL Default Entry Types

  1. In File Manager, select the icon of the folder for which you want to delete an ACL Default entry.

  2. Choose Properties from the File Manager Selected menu or from the icon's pop-up menu (displayed by pressing Shift+F10 or mouse button 3).

    The Permissions dialog box appears.

  3. Select required ACL Default entry and click Delete.

    A message appears to remind you that once you delete one of the required default ACL entries, the other three are automatically deleted for you.

  4. Click Delete in the confirmation dialog box.

  5. Use the Apply Changes To option button to choose the scope of the change.

    The options are This folder only (default) and This folder and its Subfolders.

  6. Click OK to apply the current settings and dismiss the dialog box. Click Apply to apply the settings without dismissing the dialog box.

To Set Optional ACL Default Entry Types

  1. In File Manager, select the icon of the folder for which you want to set an optional ACL Default entry type.

  2. Choose Properties from the File Manager Selected menu or from the icon's pop-up menu (displayed by pressing Shift+F10 or mouse button 3).

    The Permissions dialog box appears.

  3. Click the Show Access Control List button if the folder has no ACL defined.

    If the folder has an ACL defined, it will be visible when you open the Permissions dialog box.

  4. Click Add and select an ACL entry of type Default User or Default Owning Group.

    If the ACL does not contain the required default entries, they will also be created, with permissions set to no-read, no-write, no-execute.

  5. Click the Permission check boxes to set the permissions for the Default entry.

  6. Click Add in the Add Access List Entry dialog box.

  7. Continue to add as many ACL entries of type Default User or Default Owning Group as you want.

  8. Use the Apply Changes To option button to choose the scope of the changes.

    The options are This folder only (default) and This folder and its Subfolders.

  9. Click OK to apply the current settings and dismiss the dialog box. Click Apply to apply the settings without dismissing the dialog box.