Greetings!
I have a couple of ETL Developers that are apparently stepping on each others projects. Developer A wants to make sure Developer B can look at his jobs, but not modify them unless it is exported from Developer A's project into Developer B's project.
The directory level security on the individual projects is setup as RW for the owner R Group and R for Other. If I create a file from the command line, the permissions are set correctly for the file (-rw-r--r--).
However, when a job is created through DataStage, the permissions come out more global (Directories: drwxrwxr-x Files:-rw-rw-r--). We don't want write permissions on Group.
The umask is set to 027 which means permissions for a new
directory: rwxr-x--- or file: rw-r----- .
I am guessing that DataStage is manipulating the permissions, but I don't know how or why. Anyone have any clues?
Project Permissions on AIX
Moderators: chulett, rschirm, roy
-
- Participant
- Posts: 34
- Joined: Tue Jan 30, 2007 6:13 pm
- Location: Central Florida
Project Permissions on AIX
Doug
AAA Auto Club Group
Listen to:
Porcupine Tree
Nosound
Days Between Stations
AAA Auto Club Group
Listen to:
Porcupine Tree
Nosound
Days Between Stations
-
- Participant
- Posts: 54607
- Joined: Wed Oct 23, 2002 10:52 pm
- Location: Sydney, Australia
- Contact:
You DO want write permission on group.
You DO want different groups for different projects, and you want to make sure that the two developers are only in the right group. In dsenv and the users' profiles, make sure that umask is set to 002.
You DO want different groups for different projects, and you want to make sure that the two developers are only in the right group. In dsenv and the users' profiles, make sure that umask is set to 002.
IBM Software Services Group
Any contribution to this forum is my own opinion and does not necessarily reflect any position that IBM may hold.
Any contribution to this forum is my own opinion and does not necessarily reflect any position that IBM may hold.
-
- Participant
- Posts: 34
- Joined: Tue Jan 30, 2007 6:13 pm
- Location: Central Florida
Yes, I it setup that way. The problem is the developers fall into one security group, which means they have access to all the different projects. It is the way AIX (UNIX) security is being set for the files in the projects that is mucking everything up.Madhusv wrote:From Datastage Administrator you can set up the roles like "Developer", "Operator" etc.
Log into the administartor and click on the project you have to change permissions, then Properties->Permissions.
Doug
AAA Auto Club Group
Listen to:
Porcupine Tree
Nosound
Days Between Stations
AAA Auto Club Group
Listen to:
Porcupine Tree
Nosound
Days Between Stations
-
- Participant
- Posts: 34
- Joined: Tue Jan 30, 2007 6:13 pm
- Location: Central Florida
Ratz, I only have standard access to the form so your message was cut off. Each developer has his own project and does not share it with anyone, so if I can get the AIX system programmer to assign each ETL Developer a different default group, perhaps that will work...ray.wurlod wrote:You DO want write permission on group.
You DO want different groups for different projects, and you want to make sure that the two developers are only in the right group. In dsenv and the users' p ...
Doug
AAA Auto Club Group
Listen to:
Porcupine Tree
Nosound
Days Between Stations
AAA Auto Club Group
Listen to:
Porcupine Tree
Nosound
Days Between Stations
-
- Participant
- Posts: 54607
- Joined: Wed Oct 23, 2002 10:52 pm
- Location: Sydney, Australia
- Contact:
-
- Participant
- Posts: 34
- Joined: Tue Jan 30, 2007 6:13 pm
- Location: Central Florida