atjobs management

[thomas gourdin]

hi everybody,

I want to give privileges to an user to manage atjobs, list all jobs, remove and reschedule them. how can i do ? in the man, i saw :

All users can list and remove their own jobs. Users with appropriate privileges can list and remove jobs other than their own.

is it really possible?


Thanks in advance,


Thomas GOURDIN
Sys & SGBD administrator
LATelec - Latecoere group

[T G Manikandan]

you can restrict the users by using/creating two file

/usr/lib/cron/at.allow
/usr/lib/cron/at.deny

[T G Manikandan]

you have to make username entry in the at.allow file for the user to execute his jobs.

Any job created by a user, he becomes the owner,he can do anything(he is the owner).

Each user has his own file in the /var/spool/cron/atjobs dir for all his definitions

[thomas gourdin]

yes i know,

my problem :

roo# at -l

oracle xxxxxxxx.x
gidt xxxxxxxxx.x

oracle# at -l
this user can only see his own jobs:
oracle xxxxxxxxxx.x
but this user want to see all the jobs
and remove it if it's necessary ...

i've got a solution :

oracle# ls -ltr /var/spool/cron/atjobs |awk '{print $3" "$9}'

then the result is :

oracle xxxxxxx.x
gidt xxxxxxxx.

for the jobs detail, this user can read the file and do a tail -2, it give the command.

but this user can't remove the gidt job.

[T G Manikandan]

Only the root can do that.

Just assume each user removes the jobs of other user.

[Thierry Poels_1]

Hi,

I'm afraid that "appropriate privileges" refers to root privilege.

There are possible workarounds with sudo etc. but you'll be giving these users carte blanche.

regards,
Thierry.