AFS Permissions Manager

Mosaic is using a distributing file system called AFS. This system is different from most Unix systems using NFS or other distributed file system. The most important difference to the user is in the directory/file protection mechanism.

  • AFS uses seven access rights:
    • Read - The right to read data in files
    • Lookup - The right to see files and sub-directories
    • Insert - The right to add new files and sub-directories
    • Delete - The right to remove files and sub-directories
    • Write - The right to modify data in files
    • Lock - The right to issue file locking commands
    • Administer - The right to change ACLs for the directory

  • AFS defines three standard groups, and allows users to create additional groups.
    • system:anyuser - Anyone who can access Mosaic, including through the Internet
    • system:authuser - Anyone who is "authenticated" on Mosaic
    • system:administrators - Mosaic administrators


How To...

Important: There is a maximum limit of twenty (20) acl entries (individual userids or pts groups) for a directory. If you wish to add multiple users having the same permissions a directory or folder in your Mosaic account please read the Creating and Editing Groups section. A group can consist of multiple users, but only counts as 1 entry on the list. Groups can also help you cleanly and efficiently manage access rights to your account.


Adding New Users and Setting Permissions (For Windows XP)

  1. Open the AFS ACL Tool program. Start --> All Programs --> Mosaic XP --> Mosaic Utilities --> AFS ACL Tool



    RED - For creating and editing groups BLUE - For adding individual users and setting permissions for users or groups
  2. Click on the arrow button to select a drive then navigate to the directory for which you wish to give access. In this example the U: or //u/ drive is selected.


  3. Once the directory or folder has been selected click on the View Permissions button. This will allow you to view the users or groups and their permissions for files and folders.


  4. To add a new user or group enter the user's Mosaic user ID or the group name and click Add Entry button.


  5. To edit the user's or group's permissions, highlight an entry by left clicking on it, then click on the Edit Permissions button. This should bring up another window with 7 access rights. Check or uncheck the permissions you which to give to a specific user. Click Apply once completed.


    Important - To remove users uncheck all 7 access rights and hit apply

Creating and Editing Groups (For Windows XP)

  1. Open the AFS ACL Tool. Start --> All Programs --> Mosaic XP --> Mosaic Utilities --> AFS ACL Tool


    RED - For creating and editing groups BLUE - For adding new individual users or groups and setting permissions
  2. Enter a group name in the New Group: section. The group name must contain Your Mosaic ID:Name Of Group. In the example below we used jfwu:test. Once the group name has been entered click Add Group.


  3. Once a group has been created, you can now add and remove members. Highlight the group by left clicking on it then click on Edit Group to add and remove members of your choosing. To add a user enter their Mosaic userid in the box and click "Add Member". To remove a user highlight their entry in the Members list and click "Remove User". In the example below 3 new users have been added to the group jfwu:test.


  4. To add a group to a directory, click on the arrow button and select a directory. Click on View Permissions button once the directory has been selected. In the example below we use the U:\public_html directory. In the New User/Group: section add the name of the group that was just created. Click on Add Entry once the group name has been entered.




  5. To edit the permissions of a group, click on the Edit Permissions button. This should bring up another window with 7 access rights. Check or uncheck the permissions you which to give to a group. Click Apply once completed.


    Important - To remove a group uncheck all 7 access rights and hit apply