Re: [zfs-discuss] ZFS delegation

2009-04-21 Thread Cindy . Swearingen
Hi Grant, We have predefined ACL sets, which integrated into build 99. With ZFS delegated permissions, you can create a permission set that can be re-used. See the example 9-2 here: http://docs.sun.com/app/docs/doc/817-2271/gbchv?l=en&q=permission+sets&a=view zfs allow [-s] ... perm|@setname

[zfs-discuss] ZFS delegation

2009-04-21 Thread Grant Lowe
Hi all, Is there a simple way to grant blanket conditions to zpools? I know about the individual commands, but I want to give our DBAs the permissions to snapshot, clone, promote, rollback, rename, mount, etc. anything within their zpools. I'm kind of new to delegations. Thanks. ___

Re: [zfs-discuss] ZFS delegation script

2007-06-26 Thread Nicolas Williams
On Wed, Jun 27, 2007 at 01:45:07AM +0200, Roland Mainz wrote: > Nicolas Williams wrote: > > But will ksh or ksh93 know that this script must not source $ENV? > > Erm, I don't know what's the correct behaviour for Solaris ksh88... but > for ksh93 it's clearly defined that ${ENV} and /etc/ksh.kshrc

Re: [zfs-discuss] ZFS delegation script

2007-06-26 Thread Roland Mainz
Nicolas Williams wrote: > On Wed, Jun 27, 2007 at 12:55:15AM +0200, Roland Mainz wrote: > > Nicolas Williams wrote: > > > On Sat, Jun 23, 2007 at 12:31:28PM -0500, Nicolas Williams wrote: > > > > On Sat, Jun 23, 2007 at 12:18:05PM -0500, Nicolas Williams wrote: > > > > > Couldn't wait for ZFS deleg

Re: [zfs-discuss] ZFS delegation script

2007-06-26 Thread Nicolas Williams
On Wed, Jun 27, 2007 at 12:55:15AM +0200, Roland Mainz wrote: > Nicolas Williams wrote: > > On Sat, Jun 23, 2007 at 12:31:28PM -0500, Nicolas Williams wrote: > > > On Sat, Jun 23, 2007 at 12:18:05PM -0500, Nicolas Williams wrote: > > > > Couldn't wait for ZFS delegation, so I cobbled something toge

Re: [zfs-discuss] ZFS delegation script

2007-06-26 Thread Roland Mainz
Nicolas Williams wrote: > On Sat, Jun 23, 2007 at 12:31:28PM -0500, Nicolas Williams wrote: > > On Sat, Jun 23, 2007 at 12:18:05PM -0500, Nicolas Williams wrote: > > > Couldn't wait for ZFS delegation, so I cobbled something together; see > > > attachment. > > > > I forgot to slap on the CDDL heade

Re: [zfs-discuss] ZFS delegation script

2007-06-26 Thread Nicolas Williams
Oh, and thanks! ZFS delegations rocks. ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss

Re: [zfs-discuss] ZFS delegation script

2007-06-26 Thread Nicolas Williams
On Tue, Jun 26, 2007 at 04:19:03PM -0600, Mark Shellenbaum wrote: > Nicolas Williams wrote: > >Couldn't wait for ZFS delegation, so I cobbled something together; see > >attachment. > > The *real* ZFS delegation code was integrated into Nevada this morning. > I've placed a little overview in my b

Re: [zfs-discuss] ZFS delegation script

2007-06-26 Thread Mark Shellenbaum
Nicolas Williams wrote: Couldn't wait for ZFS delegation, so I cobbled something together; see attachment. Nico The *real* ZFS delegation code was integrated into Nevada this morning. I've placed a little overview in my blog. http://blogs.sun.com/marks -Mark ___

Re: [zfs-discuss] ZFS delegation script

2007-06-23 Thread Nicolas Williams
On Sat, Jun 23, 2007 at 12:31:28PM -0500, Nicolas Williams wrote: > On Sat, Jun 23, 2007 at 12:18:05PM -0500, Nicolas Williams wrote: > > Couldn't wait for ZFS delegation, so I cobbled something together; see > > attachment. > > I forgot to slap on the CDDL header... And I forgot to add a -p opti

Re: [zfs-discuss] ZFS delegation script

2007-06-23 Thread Nicolas Williams
On Sat, Jun 23, 2007 at 12:18:05PM -0500, Nicolas Williams wrote: > Couldn't wait for ZFS delegation, so I cobbled something together; see > attachment. I forgot to slap on the CDDL header... #!/bin/ksh # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common De

[zfs-discuss] ZFS delegation script

2007-06-23 Thread Nicolas Williams
Couldn't wait for ZFS delegation, so I cobbled something together; see attachment. Nico -- #!/bin/ksh ARG0=$0 PROG=${0##*/} OIFS="$IFS" # grep -q rocks, but it lives in xpg4... OPATH=$PATH PATH=/usr/xpg4/bin:/bin:/sbin # Configuration (see usage message below) # # This is really based on how a