Project Permissions on AIX

DKostelnik · Post by **DKostelnik** » Wed Apr 04, 2007 2:16 pm

Greetings!

I have a couple of ETL Developers that are apparently stepping on each others projects. Developer A wants to make sure Developer B can look at his jobs, but not modify them unless it is exported from Developer A's project into Developer B's project.

The directory level security on the individual projects is setup as RW for the owner R Group and R for Other. If I create a file from the command line, the permissions are set correctly for the file (-rw-r--r--).

However, when a job is created through DataStage, the permissions come out more global (Directories: drwxrwxr-x Files:-rw-rw-r--). We don't want write permissions on Group.

The umask is set to 027 which means permissions for a new
directory: rwxr-x--- or file: rw-r----- .

I am guessing that DataStage is manipulating the permissions, but I don't know how or why. Anyone have any clues?

Madhusv · Post by **Madhusv** » Wed Apr 04, 2007 5:23 pm

From Datastage Administrator you can set up the roles like "Developer", "Operator" etc.

Log into the administartor and click on the project you have to change permissions, then Properties->Permissions.

ray.wurlod · Post by **ray.wurlod** » Wed Apr 04, 2007 7:09 pm

You DO want write permission on group.

You DO want different groups for different projects, and you want to make sure that the two developers are only in the right group. In dsenv and the users' profiles, make sure that umask is set to 002.

DKostelnik · Post by **DKostelnik** » Thu Apr 05, 2007 9:20 am

Madhusv wrote:From Datastage Administrator you can set up the roles like "Developer", "Operator" etc.

Log into the administartor and click on the project you have to change permissions, then Properties->Permissions.

Yes, I it setup that way. The problem is the developers fall into one security group, which means they have access to all the different projects. It is the way AIX (UNIX) security is being set for the files in the projects that is mucking everything up.

DKostelnik · Post by **DKostelnik** » Thu Apr 05, 2007 9:23 am

ray.wurlod wrote:You DO want write permission on group.

You DO want different groups for different projects, and you want to make sure that the two developers are only in the right group. In dsenv and the users' p ...

Ratz, I only have standard access to the form so your message was cut off. Each developer has his own project and does not share it with anyone, so if I can get the AIX system programmer to assign each ETL Developer a different default group, perhaps that will work...

ray.wurlod · Post by **ray.wurlod** » Thu Apr 05, 2007 1:03 pm

That is essentially what I suggested. :D

DKostelnik · Post by **DKostelnik** » Thu Apr 05, 2007 1:11 pm

ray.wurlod wrote:That is essentially what I suggested. :D ...

Cool! Thank you! :D