Filesystem Group Definitions

We want to document what each filesystem group we have is used for. That is to ensure consistent usage, and information for auditors.

The following is data from 2012, when we last had a security audit. So it will be out-of-date. And the (re)formatting is still a work in progress. Over time we'll expect to correct it, and it provides a place to record new groups.

It is the case that most of the groups used to control access to specific WWW pages begin with "www" (e.g. www-dmet). And most of the groups specific to a course begin with (or are) the course name (e.g. "cs200").

Common to "CS-GENERAL" and "CS_TEACHING"

We don't seem to have a guarantee that membership in each of the following is the same in each environment.

Group Provides
accounts ability to manipulate accounts resources on various systems, especially when logged in to the accounts management machine.
arptest Adrian Pepper's testing
isg ISG instructors and staff
isg_cs an historical variant of group "isg"
opcons obsolete group to provide "operator" access to "consoles"
www-logs read access to WWW server logs

The "CS-GENERAL" Directory Service

The "CS-GENERAL" directory service reports these CSCF staff group memberships. In the following, $common refers to these userids:

Group Provides
accounts ability to set common user account attributes (including passwords) in the CS-TEACHING and CS-GENERAL computing environments
accounts_cs ability to set common user account attributes (including passwords) in the CS-TEACHING and CS-GENERAL directory service ?
cscf-jobdesc read access to CSCF job description details
mgmt access to material that either CSCF or MFCF mgmt should have
source historical means for access to software source
staff_cscf CSCF staff members. This is also used to control administrative access to some research machines.
meeting an historical equivalent to the staff_cscf group
xh-admin_cs incomplete experiment in providing IST and MFCF staff access to CSCF software distribution machines
fmsadmin administering the FileMaker server, used for some Grad Office and ISG data
bbabcs access to BBA/BCS program files, mostly WWW pages
cs-anniversary access to the WWW pages for the CS 40th anniversary
cs-photo sharing of photos within CS, looks to be largely unused
www_cf read/write access to WWW pages that CSCF and MFCF had in common -- largely historical
www_cscf read/write access to CSCF WWW pages not otherwise controlled

Group Provides
algcomp ?
ecom ?
faculty_cs ?
fip ?
fms-graddb-data ?
fms-graddb-read ?
fms-ogsas-read ?
gw ?
health-i ?
hpsoftware ?
icr_admin ?
kmsgrads ?
latin2010 ?
lpaig ?
maple ?
mfcf-library ?
net2005 ?
npsg_sim ?
npsg_w ?
sigsam ?
barbay historical research group
ceras-doc write access to CERAS related WWW pages (the "muscat" cluster)
users_bif allowed to login to the corresponding research environment
users_ds allowed to login to the corresponding research environment
users_gamay allowed to login to the corresponding research environment
users_marroo allowed to login to the corresponding research environment
users_nsm allowed to login to the corresponding research environment
users_plg allowed to login to the corresponding research environment
users_scg allowed to login to the corresponding research environment
users_tcl allowed to login to the corresponding research environment
users_watform allowed to login to the corresponding research environment
admin_bif allowed to administer the corresponding research environment
admin_cs allowed to administer the corresponding research environment
admin_ds allowed to administer the corresponding research environment
admin_marroo allowed to administer the corresponding research environment
admin_nsm allowed to administer the corresponding research environment
admin_plg allowed to administer the corresponding research environment
admin_scg allowed to administer the corresponding research environment
admin_tcl allowed to administer the corresponding research environment
admin_watform administrative access to some research systems in the WatForm research group
cs-adm convenient access to some "cs-adm" account files, used for miscellaneous administration, e.g. mailing lists.
cs-info convenient access to some "cs-info" account files, used for more general CS administrative information, accessible by all faculty
cs-review convenient access by "cs-adm" to the obsolete "cs-review" account files
csgrad convenient access to "csgrad" account files for the CS Grad Office staff
cscbce write access to the WWW pages for the 2010 CSCBCE conference
cs-ugrad write access to the Undergraduate area of the CS WWW space
cs-ugrec write access the Undergraduate Recruiting Committee WWW pages
www_cs read/write to many general CS WWW pages
www_research read/write access to CS WWW pages related to research, e.g. technical reports and the research directory
www_grad write access to the (CS grad WWW pages
www-ai write access to the content for the corresponding WWW site
www-boutaba write access to the content for the corresponding WWW site
www-chil write access to the content for the corresponding WWW site
www-compstats write access to the content for the corresponding WWW site
www-dmet write access to the content for the corresponding WWW site
www-eccad write access to the content for the corresponding WWW site
www-epad write access to the content for the corresponding WWW site
www-penmath write access to the content for the corresponding WWW site
www-qc write access to the content for the corresponding WWW site
www-scg write access to the content for the corresponding WWW site
www-sss write access to the content for the corresponding WWW site
www_bcfm write access to the content for the corresponding WWW site
www_db write access to the content for the corresponding WWW site
www_hci write access to the content for the corresponding WWW site
www_jis write access to the content for the corresponding WWW site
www_softeng write access to the content for the corresponding WWW site
www_tp write access to the content for the corresponding WWW site
abstfind write access to "abstfinder" WWW pages (Dan Berry's research - ST #78270)
csphotos something to do with student class photos
cs-uops access to CS Undergraduate Operations data
cs-eval access to teaching evaluation info

The "CS-TEACHING" Directory Service

The "CS-TEACHING" directory service reports these CSCF staff group memberships.

Group Provides
cs-marks access to specialized assignment processing programs
cs_build convenient access to locally built software, and in general for software useful to undergraduate technical support rather than specifically ISG supported courses
cs350_999 for students working together in that course

Group Provides
cs246se-ta ?
db2as2 ?
db2cs338 ?
hsld ?
libvirtd ?
oracle_ac ?
se240-ta ?
staff_cs ?
acm00 used for competitors in the ACM contest
acm used for the ACM contest (judging)
cccx for the Canadian Computing Competition
consultant convenient access to the consultant account in the Math Help Centre (run my MFCF)
classgroup for access by course accounts to the `classgroup` command which dodges NFS limitations on group membership
math_0 Math students in Registrars data that don't have a year assigned
cs100_student students of the course
cs115_student students of the course
cs136_student students of the course
cs200_student students of the course
cs100_tutor tutors of the course
cs200_tutor tutors of the course
cs100_instructor instructors of the course
cs200_instructor instructors of the course
cs115ae the Arab Emirates (i.e. Dubai) version of the course
cs116ae the Arab Emirates (i.e. Dubai) version of the course
cs115aet the Arab Emirates (i.e. Dubai) version of the course
cs116aet the Arab Emirates (i.e. Dubai) version of the course
cs_instructor instructors that have any group assignment
cs_tutor_ta all tutors and TAs that have any group assignment
csadvisors for convenient access to the files of the "csadvisors" account
cs100 for convenient access to material related to teaching that course
cs115 for convenient access to material related to teaching that course
cs116 for convenient access to material related to teaching that course
cs123 for convenient access to material related to teaching that course
cs124 for convenient access to material related to teaching that course
cs125 for convenient access to material related to teaching that course
cs126 for convenient access to material related to teaching that course
cs132 for convenient access to material related to teaching that course
cs133 for convenient access to material related to teaching that course
cs134 for convenient access to material related to teaching that course
cs135 for convenient access to material related to teaching that course
cs136 for convenient access to material related to teaching that course
cs137 for convenient access to material related to teaching that course
cs138 for convenient access to material related to teaching that course
cs145 for convenient access to material related to teaching that course
cs146 for convenient access to material related to teaching that course
cs200 for convenient access to material related to teaching that course
cs230 for convenient access to material related to teaching that course
cs234 for convenient access to material related to teaching that course
cs240 for convenient access to material related to teaching that course
cs241 for convenient access to material related to teaching that course
cs245 for convenient access to material related to teaching that course
cs246 for convenient access to material related to teaching that course
cs247 for convenient access to material related to teaching that course
cs251 for convenient access to material related to teaching that course
cs330 for convenient access to material related to teaching that course
cs343 for convenient access to material related to teaching that course
cs348 for convenient access to material related to teaching that course
cs350 for convenient access to material related to teaching that course
cs354 for convenient access to material related to teaching that course
cs436 for convenient access to material related to teaching that course
cs445 for convenient access to material related to teaching that course
cs454 for convenient access to material related to teaching that course
cs487 for convenient access to material related to teaching that course
cs488 for convenient access to material related to teaching that course
cs645 for convenient access to material related to teaching that course
cs654 for convenient access to material related to teaching that course
cs679 for convenient access to material related to teaching that course
cs688 for convenient access to material related to teaching that course
cs779 for convenient access to material related to teaching that course
cs788 for convenient access to material related to teaching that course
cs888 for convenient access to material related to teaching that course
se112 for convenient access to material related to teaching that course
se240 for convenient access to material related to teaching that course
cs100.t an environment for testing assignments for that course
cs115t an environment for testing assignments for that course
cs116t an environment for testing assignments for that course
cs123t an environment for testing assignments for that course
cs124t an environment for testing assignments for that course
cs125t an environment for testing assignments for that course
cs126t an environment for testing assignments for that course
cs134t an environment for testing assignments for that course
cs135t an environment for testing assignments for that course
cs136t an environment for testing assignments for that course
cs137t an environment for testing assignments for that course
cs138t an environment for testing assignments for that course
cs145t an environment for testing assignments for that course
cs146t an environment for testing assignments for that course
cs230t an environment for testing assignments for that course
cs234t an environment for testing assignments for that course
cs240t an environment for testing assignments for that course
cs241t an environment for testing assignments for that course
cs245t an environment for testing assignments for that course
cs246t an environment for testing assignments for that course
cs247t an environment for testing assignments for that course
cs251t an environment for testing assignments for that course
cs341t an environment for testing assignments for that course
cs343t an environment for testing assignments for that course
cs348t an environment for testing assignments for that course
cs350t an environment for testing assignments for that course
cs442t an environment for testing assignments for that course
cs444t an environment for testing assignments for that course
cs454t an environment for testing assignments for that course
cs486t an environment for testing assignments for that course
cs786t an environment for testing assignments for that course
cs798t an environment for testing assignments for that course
cs842t an environment for testing assignments for that course
se112-t an environment for testing assignments for that course
se112t an environment for testing assignments for that course
se212-t an environment for testing assignments for that course
se212t an environment for testing assignments for that course
se240-t an environment for testing assignments for that course
se240t an environment for testing assignments for that course
cs247_NN for students working together in that course
cs350_NNN for students working together in that course
cs452_NN for students working together in that course
cs125-ta for Teaching Assistants for that course
cs134-ta for Teaching Assistants for that course
cs230-ta for Teaching Assistants for that course
cs234-ta for Teaching Assistants for that course
cs240-ta for Teaching Assistants for that course
cs241-ta for Teaching Assistants for that course
cs246-ta for Teaching Assistants for that course
cs251-ta for Teaching Assistants for that course
cs350-ta for Teaching Assistants for that course
cs452_sf to control access to the train lab download directory
cs_1 first year CS students
cs_4 fourth year CS students
math_1 first year Math students
cssystems storing tutorials that are useful for multiple courses
login_graphics obsolete form of access control to student graphics lab machines
login_ug obsolete form of access control to the teaching environment
Edit | Attach | Watch | Print version | History: r2 < r1 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r2 - 2014-09-19 - BillInce
 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright © 2008-2024 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback