LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   CentOS (https://www.linuxquestions.org/questions/centos-111/)
-   -   Linux file and folder permissions. (https://www.linuxquestions.org/questions/centos-111/linux-file-and-folder-permissions-4175725636/)

kartiksadhukhan 06-02-2023 04:22 AM

Linux file and folder permissions.
 
Hi,

This is my first time posting on this forum. I need some guidance on how to set up a directory so that a user can do any files changes and can access everything inside the directory except download and upload files and directories.

Any help would be highly appreciated.

Regards,
Kartik Sadhukhan

pan64 06-02-2023 04:38 AM

Hi, and welcome here, at LQ!

The permissions on directories and files do not influence the network communication (upload and download) at all.
Would be nice to give us more details about your environment, system, OS, use case and actually what do you want to achieve.

Turbocapitalist 06-02-2023 05:35 AM

Yes, more details are needed as to distro, including version, and which software is in question. However, just a wild guess, you might be able to restrict a program slightly using AppArmor. It has very good, fine-grained control over file system access per program while it's networking, however, is only either on or off.

kartiksadhukhan 06-02-2023 06:13 AM

Hi all,

Thank you for your prompt response and for the warm welcome. An AWS Lightsail-hosted Magento website is running on a Bitnami LAMP server. The OS information is attached. I have a developer to whom I want to give access to Magento's root directory, which is /opt/bitnami/apache/htdocs in my case. We want to allow the developer full access to the code so that he or she can make changes to the code, but we do not want them to download or upload anything onto the server.

https://ibb.co/R9598SH

Regards,
Kartik Sadhukhan

boughtonp 06-02-2023 08:25 AM

Quote:

Originally Posted by kartiksadhukhan (Post 6434284)
We want to allow the developer full access to the code so that he or she can make changes to the code, but we do not want them to download or upload anything onto the server.

Either you've explained badly, or you don't understand what you're asking.


Instead of trying to give them restricted access, a better avenue is probably to put a copy of the code under source control (e.g. Git), and give the developer commit access to that repository, but not access to the code on the server.

Then, have someone you trust review the changes they make, and (once verified) update the webroot from the repository as required.



All times are GMT -5. The time now is 02:31 AM.