Can one set up privedit for a directory structure

[Records Management]

I have a HP-UX Protected WS installation, which is rather new to us. I have a web admin that needs to be able to add, edit, and delete files in the two cgi directories on a routine basis.

The problem is that you can only set the RBAC authorization for a single file. What I am trying to do is set it up so that he can do anything he wants in the two cgi areas, /var/jail/wp_cgi/opt/hpws/apache/htdocs and
/var/jail/wp_outcgi/opt/hpws/apache/htdocs.

It's interesting that the PSWS admin guide states that the WebAdmin role has "As the
Webadmin, you have full default access to the publishing and scripting directories", but not that I can see.

Of course, I could always put the user in group bin, which should fix the problem. But, that's not a clean solution either.

[Marco A.]

I really hate RBAC, normally when I face those little "issues" I start to set ..as you said ... permissions ! , putting into the bin group have to help you with that.

Regards,

Marco,

[Duncan Edmonstone]

Have you looked sat Security Containment as an option for this?

On the surface it would appear to match more closely whatr you require than RBAC:

http://docs.hp.com/en/internet.html#Security%20Containment

HTH

Duncan

[Records Management]

Actually, security containment is one of the parts of the secure web server package.

I think that I'm going to give the developers directory permission to do their adds/mods/deletes on the two cgi directories the old way. When we move it over to production, I'll move the stuff with the "original" permissions.