I'm trying to install some software on a system running on Solaris 10
I've created the user assigned Primary Administrator rights and roo
group access.

The problem is this user cannot vi any files, even those the user owns
The system displays a Permission denied messages for director
/var/tmp.

I've checked the file system and ACL for this directory and this use
should have at least RW access to both.

Anyone have any ideas

--
nortje
-----------------------------------------------------------------------
nortjed's Profile: http://forums.yourdomain.com.au/member.php?userid=11
View this thread: http://forums.yourdomain.com.au/showthread.php?t=9465

can u give me the details of the user u created deatails can be found
in /etc/passwd and /etc/shadow?

Also chk permissions of /var


nortjed wrote:
> I'm trying to install some software on a system running on Solaris 10.
> I've created the user assigned Primary Administrator rights and root
> group access.
>
> The problem is this user cannot vi any files, even those the user owns.
> The system displays a Permission denied messages for directory
> /var/tmp.
>
> I've checked the file system and ACL for this directory and this user
> should have at least RW access to both.
>
> Anyone have any ideas?
>
>
> --
> nortjed
> ------------------------------------------------------------------------
> nortjed's Profile: http://forums.yourdomain.com.au/member.php?userid=116
> View this thread: http://forums.yourdomain.com.au/showthread.php?t=94652

nortjed wrote:
> I'm trying to install some software on a system running on Solaris 10.
> I've created the user assigned Primary Administrator rights and root
> group access.
>
> The problem is this user cannot vi any files, even those the user owns.
> The system displays a Permission denied messages for directory
> /var/tmp.
>
> I've checked the file system and ACL for this directory and this user
> should have at least RW access to both.
>
> Anyone have any ideas?

Are you trying to use RBAC ?

The way to use Role Based Access COntrol is to create a separate
ROLE account wich is not the users Login account, using roleadd(1M)
and then allow the user to access this new ROLE account,
this is done with usemod(1M)

There is no reason for the roleaccount to own any files.
it shoud be allowed to edit files accoridng to its priviledge.

The permission of /var/tmp is supposed to be
drwxrwxrwxt

//Lars