> I have a rather serious problem with aquarela's > setup: since it must run as bootes so that any use can login, > it seems that *all* privileges (read/write, etc.) are those only of > bootes! Is there any way so that each user that has logged in > has his/her own read/write privileges, as if they logged into their > own Plan 9 account (in fact, they *are* logging into their Plan 9 > account, so each user inheriting only the privileges of bootes, > makes NO sense!)?
You misunderstand. When the user successfully authenticates aquarela changes the owner of the process to the authenticated user so it can read and write only those files that that plan9 user can read and write. Aquarela must be envoked as bootes as only bootes has the rights to become any user. see /sys/src/cmd/aquarela/smbcomsessionsetupandx.c:137 -Steve