Request for group execute access

Technical
1

Hi team,

We are running the u-dj813 suite, which performs ancillary regridding. This suite uses an executable located at:

/g/data/access/projects/access/access-cm2/utils/vegdist_regrid_ants

However, we currently do not have permission to execute it.

[sl5165@mytest u-dr651]$ getfacl /g/data/access/projects/access/access-cm2/utils/vegdist_regrid
getfacl: Removing leading '/' from absolute path names
# file: g/data/access/projects/access/access-cm2/utils/vegdist_regrid
# owner: mrd599
# group: access.admin
user::rwx
group::r-x
group:access:r-x
mask::r-x
other::---

[sl5165@mytest u-dr651]$ getfacl /g/data/access/projects/access/access-cm2/utils/vegdist_regrid_ants
getfacl: Removing leading '/' from absolute path names
# file: g/data/access/projects/access/access-cm2/utils/vegdist_regrid_ants
# owner: mrd599
# group: access.admin
user::rwx
group::r-x
other::---

Could someone in the access.admin group please add read and execute permissions for the access group to vegdist_regrid_ants using the following command?

setfacl -m group:access:rx /g/data/access/projects/access/access-cm2/utils/vegdist_regrid_ants

This would make its permissions consistent with vegdist_regrid so that we can execute.

2

Hi @lishx, I’ve been informed by @Aidan that, unfortunately, @MartinDix is the only one who can do this for you. He will be back from leave after 11/8

1 Like
3

Thank you so much!

4

It’s one (of many) reasons ACCESS-NRI is moving towards deploying software and data in the vk83 project using a service user account (tm70_ci). We can set up scripts and processes to automatically deploy software and data, that avoid many of these issues, and make them easier to fix if they do occur.

That is cold comfort in this case, but in the future this should lead to more reliable services for users.

2 Likes
5

Thanks @Aidan, as users we appreciate this!

1 Like
6

I put my thinking cap on and managed to come up with a solution (I copied the original to vegdist_regrid_ants_copy and overwrote the original so I could set the ACLs):

$ getfacl /g/data/access/projects/access/access-cm2/utils/vegdist_regrid_ants
getfacl: Removing leading '/' from absolute path names
# file: g/data/access/projects/access/access-cm2/utils/vegdist_regrid_ants
# owner: aph502
# group: access
user::rwx
group::rwx			#effective:r-x
group:access:r-x
group:access.admin:rwx		#effective:r-x
mask::r-x
other::---

Can you test @lishx and confirm it fixes your issue and mark this as the solution?

1 Like
8

Hi Aidan @Aidan,

Yes, now I can execute, appreciate your help!

3 Likes