[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference iosg::all-in-1_v30

Title:	OLD ALL-IN-1 (tm) Support Conference
Notice:	Closed - See Note 4331.l to move to IOSG::ALL-IN-1
Moderator:	IOSG::PYE

Created:	Thu Jan 30 1992
Last Modified:	Tue Jan 23 1996
Last Successful Update:	Fri Jun 06 1997
Number of topics:	4343
Total number of notes:	18308

3515.0. "GMA removes Group access to shared folders" by TOPPER::BARHAM (Norbert:) Tue Nov 09 1993 17:55

    ALL-IN-1 3.0-1
    
    If you grant mail access (GMA) to a specific user, you then find that all 
    wpl files subsequently created do not have any Group access, which they did
    before. This means that any new documents in your shared folders (e.g.
    [BARHAM]SHARED ) are inaccesible to ALL users.
    
    Why does GMA stop access to shared folders ? (I think it's done in
    FC_DRAWER_SHARE.SCP when it sets the DEFAULT_PROTECTION.)
    
    If it is this script can we change it to still allow group access or is 
    this done for a reason ?
    I expect the real answer is to move the shared folder into a drawer other
    than MAIN ??
    
    Thanks,
    
    Clive Barham
    UK CSC

T.R	Title	User	Personal Name	Date	Lines
3515.2	Problem already reported to Engineering	IOSG::COTTINGHAM		`Mon Nov 15 1993 16:06`	27
	Problem already reported in SPR THR-18214. Extract of Answer given below. Problem 1 The "GMA" option does not preserve any existing shared access to the target mail drawer. That is, when a user employs the "GMA" option to modify the current mail access to their "MAIN" drawer, any shared access to the "MAIN" drawer which had previously been granted via the "Drawer Management" subsystem, is overridden by the access granted (or revoked) by the "GMA". The above problem is a restriction in ALL-IN-1 V3.0. Trying to merge different ACL lists would be very difficult to achieve, especially when groups are involved. However your report will be passed to our development team for consideration in a possible future release of ALL-IN-1. Note that if a MAIN Drawer is set to Advanced shared then in GMA the user is asked "Drawer is ADVANCED SHARED - overwrite existing drawer access? [Y/N]". The implimentation of this warning for Regular shared drawers will also be considered for inclusion in a possible future release of ALL-IN-1. However, we would recommend that the MAIN drawer is not used as a Shared drawer. It would be better to use a separate Drawer to share documents. Regards Alan
3515.3		LOOKIN::BARHAM	Norbert:	`Tue Nov 16 1993 15:24`	19
	Thanks Alan, Customer is not at all happy with this though as GMA has completely ruined their default protections and anyone who has used it finds users are unable to access shared folders in their MAIN drawer anymore. Refiling thousands of documents to new drawers is going to take ages, even with functions like XRFD. It turns out that revoking the GMA does not reset the default protection. Is there a quick way to revert to the previous default protection for all users ? (I guess they'll have to generate a command procedure to do it ?) They are now going to have to advise that noone use GMA having just told them how it works! Was there any newsflash warning about this nightmare ?! Thanks, Clive
3515.4	Possible workround	IOSG::MAURICE	Differently hirsute	`Tue Nov 16 1993 16:30`	15
	Hi, Have you tried customising FC_DRAWER_SHARE.SCP to change the line GET OA$DCL = "SET ACL/ACL=(DEFAULT_PROTECTION,S:REWD,O:REWD,G,W) " - to GET OA$DCL = "SET ACL/ACL=(DEFAULT_PROTECTION,S:REWD,O:REWD,G:R,W) " - If it works it would seem a simple workround. Cheers Stuart
3515.5	really?	LOOKIN::BARHAM	Norbert:	`Wed Nov 17 1993 11:13`	7
	Wouldn't that change the defaults for people who select GMA from now on? (I'm unsure). I need to have a way of reverting to the previous default for all users that have already used GMA... Thanks, Clive