On Tue, Jul 03, 2007 at 08:28:54PM +0200, Maarten Litmaath wrote:
> Valentin Vidic wrote:
>
> >On Tue, Jul 03, 2007 at 12:47:27PM +0300, Kyriakos Ginis wrote:
> >
> >>Anyway, does this affect only the lcg-CE as you mentioned in the
> >>broadcasted message? What about other nodes that use lcmaps, like the
> >>gLite-CE and the classic SE?
>
> Only the LCG-CE is affected, as it gives _privileges_ to sgm/prd users.
>
> On the Classic SE everything is group-writable anyway.
>
> On the VOBOX every sgm user is mapped to the first (or only) sgm account
> of the VO.
>
> On the DPM the UNIX accounts are not used to obtain access rights in the
> DPM name space.
DPM *does* allow users to access files outside the DPM name space, in
the unlikely(?) event that the DPM server uses the same home directories
as your farm or has access to the software area it can be used to upload/change
files.
Kostas
|