All geek questions in one place

How to restrict read access to VOB in ClearCase (Windows Server)?

I was asked to see how to restrict read access on some VOB files in ClearCase for compliance reasons (so this should be checked, etc. etc.). I have found a solution so far that I will post here, but I still have questions, so any help would be appreciated. Moreover, the devil is in the details, I think.

For the convenience of the argument, suppose we have 3 VOBs and 3 groups:

  • gA and gB are two special groups, all other CC users are in gC, which is the default CC group.
  • VOB vA - read / write access to the gA group and is limited to all others
  • VOB vB, this is read / write access to the gB group, read access to the gA group and is limited to everyone else
  • VOB vC - read / write access for everyone

Failed Questions:

  • What is the impact of having different domain groups for CC users? When people register, their clear data group is selected by the user variable CLEARCASE_PRIMARY_GROUP. If they are from gA and work fine in vA, this variable will be set to gA, but if they need to change something in vC, I am sure that the group ownership of their files / versions in vC will remain gA if they do nothing. The objects in vC will ultimately belong to the group gA, gB, gC. Could this be a problem?

  • I'm not even sure that ACLs can be configured correctly on vB without actually creating a new gA group containing people from gA and gB, am I correct?

  • , , , ( ). - ?

  • , ClearCase Regions . ?

,

+3
2

developerworks IBM:

()

  • ClearCase ( gC, ). , vobadmin .

  • VOB :
    cleartool protectvob -chgrp group_name <\\..vob.vbs>
    gA vA
    gB vB
    gC VOB ( )

  • " " vA vB VOB: cleartool protect -chmod 770 <vob-tag-name>
    , CC Explorer: VOB " ". VOB ( : , VOB , 200 VOB).

gA VA VOB.
gB VOB VOB.
gC, VOB.

, CLEARCASE_PRIMARY_GROUP , , , . .

0

CC?

, ( ).
.

VOB vB, / gB, gA

gB vB, gA ( ).
770 , gA gB ( gA, / gB, gC)

/ , clearcase ( "cleartool protect" "cleartool protectvob" ), " " (chmod 770)

ClearCase , : , ( mktag -vob, , "" vob )

, , , ( ).

... CM , CM ;) , . , VCS, . ClearCase .

+1

Source: https://habr.com/ru/post/1710010/

More articles:


All Articles