Grant root-like access to user over dir on AIX

[mikegram]

My org runs its web site off an AIX system. I post my web updates to a staging area for the admin to move on to the server.

My admin says that for me to have the ability to move in new files myself I need to be root (for the web dir at least), but for security reasons, I can't be given root system wide. Anyone know how to make me god of the web dir and joe user everywhere else? Many thanks.

[superpower]

[edited my first answer, don't think it would work for what you were asking]

Another common method is to have the admin set up sudo so you log into something like root, which is basically root minus a few commands.

[bcc1234]

You can ask him to copy the needed binaries to the directory above one that is used to hold web content and give you access to root in a chroot'ed environment confined just to that location.

Another possibility is to create a special group that would be allowed access to modify those files and add your user account to that group.

[SeanW]

I don't see why proper use of groups and directory permissions can't solve this problem...

Sean

[daisho]

This doesn't make sence. I have developers that update pages all the time and they certainly don't have root access. Just a regular login.

Unfortunatly it might just be a "Short and Sweet" answer from the admin.

A simple solution that I use is create a group for webfile editing.

I assume (and yes I know that's risky ;) ) that you are using Apache.

Make the document root for the website owned by the new group. Also set the Group Sickybit and give the group write privileges.

Now create accounts for people that need to edit files. Add them to the group.

The Sticky bit ensures that newly created files will have the document root directories group rather than the users default group.

There are other ways some simply but I like this one :)

daisho.

[bakedjake]

Mike, I think what your web developer is asking you is to get write permission to your web directory.

You can do with, as SeanW suggested, with proper permissions. Simply make yourself the owner of your web directory.