make sure flowcell dirs are group writable

[GoogleCodeExporter]

so all members of uec-dev can write

Original issue reported on code.google.com by zack...@gmail.com on 8 Nov 2012 at 7:54

[GoogleCodeExporter]

tcsh users should add this to the top of their .cshrc

you will then always make new files/folders group uec-dev writable

if (! ($?DEVGROUP)) then
        setenv DEVGROUP true;
        echo changing default group from $group to uec-dev
        newgrp uec-dev   
endif
echo setting default permissions to group uec-devr read-write
umask 002

Original comment by zack...@gmail.com on 15 Nov 2012 at 11:00

[GoogleCodeExporter]

correction:

if (! ($?DEVGROUP)) then
        setenv DEVGROUP true;
        echo changing default group from $group to uec-dev
        newgrp uec-dev   
endif
umask 002

or at the very least, add umask 002 to make things group-writable (not 
neccessarily uec-dev though)

Original comment by zack...@gmail.com on 15 Nov 2012 at 11:02

[GoogleCodeExporter]

Original comment by zack...@gmail.com on 15 Nov 2012 at 11:02

• Changed state: Done

[GoogleCodeExporter]

In the Bash .profile file, the equivalent didn't seem to work. This is what I 
got to work in the bash .profile file:

# Permissions.  Set to uec-dev and make group writable.  Make this the first 
thing since it restarts at newgrp                                               

if [ `id -gn` != "uec-dev" ]; then
    echo changing default group from `id -gn` to uec-dev
    newgrp - uec-dev
    umask 002
fi

Original comment by benb...@gmail.com on 16 Nov 2012 at 12:09

[GoogleCodeExporter]

i think bash makes it a lot easier in that you dont have to do the if group=foo 
test.

if you put 
     newgrp slxa
in the ~/.bash_profile

and 
   umask 002 
in ~/.bashrc 

it should do the job. keep a ssh window open to hpcc with your editor opened to 
.bash_profile when testing, and then make sure to use a new window to actually 
verify that its doing the right thing. otherwise if it gets stuck in a infinite 
loop you wont be able to get back in and change it.

Original comment by zack...@gmail.com on 16 Nov 2012 at 12:20

[GoogleCodeExporter]

I was looking in the ga/analysis/Bisulfite_merge_2012-11-20 run (Zack).  It 
looks like the workflow params stuff is group uec-dev, but everything generated 
on the cluster nodes is group hsc-ar. Also, all the pbs output files are not 
group readable. These should be at least group readable, so that we can all see 
them.

Original comment by benb...@gmail.com on 23 Nov 2012 at 6:16

• Changed state: Started

[GoogleCodeExporter]

my hack above has some serious problems, scp and svn will stop working since 
the require a login and fork, while newgrp does its own fork. basically 
changing the default group is impossible. People may be able to request a 
change to ITS/hpcc, but remember that changing primary group to uec-dev will 
exclude many regular users by default ie (yaping and rotation students wont be 
able to see anything anymore)

PBS is hardcoded to always make the output only readable by self, this is a 
security feature and is not optional afaik.

closing ticket since there is nothing i can personally do.

Original comment by zack...@gmail.com on 24 Nov 2012 at 8:03

• Changed state: WontFix