Finding what a user has permissions to?

[Gary Bernstein]

Is there way to determine what folders a user has privileges to? I know I can tell what groups they are a member of, but I need to know that when a user leaves that I have figured out which files they had access to so that I can evaluate whether the file should be deleted or kept and given to his/her replacement or supervisor.

Thanks
-Gary

[Gary Bernstein]

The find command looks promising. I just took a quick look at the man page (as I need to get home for dinner). The only thing I didn’t see is a way to find if a particular user as an ACL for an item (which I realize isn’t what I asked, but should have).

Thanks
-Gary

[maccanada]

Well, I really wouldn’t recommend ever using ACL’s on a per-user basis unless it’s absolutely essential – it’s a really BadThing©. It can get messy and complicated in a hurry. Using Groups would probably solve a lot of your problems…having said that;

ls -le

will list the ACLs out, so it should be possible to script something detailing what you need.

[Gary Bernstein]

I agree, but I haven’t figured it out yet. I was looking at doing something like an: ls -leR | grep username but it didn’t return the name of the file. I thought about adding grep -B 1 username, but the username may not always be the first ACL.

I’m open to suggestions……

Thanks
-Gary

[Author]

Posts