Solved

how to set up linux permissions for contractor?

Posted on 2010-11-17
3
372 Views
Last Modified: 2012-05-10
I am setting up a webserver for a contractor to use.  i want to give them permissions to log in, upload files to the website, restart apache if needed, and set up the postrgres db.  what is the best practice for doing this?  i want to give them enough permissions to get the job done, but not too many permissions they dont need.
0
Comment
Question by:trip008vk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 5

Expert Comment

by:dacasey
ID: 34157643
Create an account for him.  Add him to the apache group, postgres and other groups as necessary.

adduser consultant

vi \etc\group   <- add the newly created user to al groups you think he will need.
0
 
LVL 7

Accepted Solution

by:
Hatrix76 earned 250 total points
ID: 34162785
NEVER EVER touch /etc/passwd or /etc/group directly!

You should never do that, but use the tools the system provides you with.

usermod -a -G <group> <user>


to add a user to groups

for sudo, use visudo, etc.


So, having this out of the way, your answer depends deeply on which distribution of linux you will use, in centos i would do:

He should be able to watch the logfiles of httpd, as they are world-readable

allow him to restart apache with sudo (use visudo) add:
<username> ALL=/etc/init.d/httpd start, /etc/init.d/httpd stop,/etc/init.d/httpd restart, /sbin/services httpd restart

then add him to the group you use for the website (like apache) and make sure the upload directory for the webpage has group read-write-execute permissions on them.

Then, create him an postgresql user account which is allowed to create databases and you should be good to go. With this account he should be able to administrate his databases.
0
 

Author Closing Comment

by:trip008vk
ID: 34168257
Thank you, Hatrix76.  this is along the lines of what i had been thinking.  dacasey's "solution" wasn't helpful at all
0

Featured Post

Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Over the last year I have answered a couple of basic URL rewriting questions several times so I thought I might as well have a stab at: explaining the basics, providing a few useful links and consolidating some of the most common queries into a sing…
If you've heard about htaccess and it sounds like it does what you want, but you're not sure how it works... well, you're in the right place. Read on. Some Basics #1. It's a file and its filename is .htaccess (yes, with a dot in the front). #…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…
Suggested Courses

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question