Filesystem Group Definitions

We want to document what each filesystem group we have is used for. That is to ensure consistent usage, and information for auditors.

The following is data from 2012, when we last had a security audit. So it will be out-of-date. And the (re)formatting is still a work in progress. Over time we'll expect to correct it, and it provides a place to record new groups.

It is the case that most of the groups used to control access to specific WWW pages begin with "www" (e.g. www-dmet). And most of the groups specific to a course begin with (or are) the course name (e.g. "cs200").

Common to "CS-GENERAL" and "CS_TEACHING"

We don't seem to have a guarantee that membership in each of the following is the same in each environment.

Group	Provides
accounts	ability to manipulate accounts resources on various systems, especially when logged in to the accounts management machine.
arptest	Adrian Pepper's testing
isg	ISG instructors and staff
isg_cs	an historical variant of group "isg"
opcons	obsolete group to provide "operator" access to "consoles"
www-logs	read access to WWW server logs

The "CS-GENERAL" Directory Service

The "CS-GENERAL" directory service reports these CSCF staff group memberships. In the following, $common refers to these userids:

Group	Provides
accounts	ability to set common user account attributes (including passwords) in the CS-TEACHING and CS-GENERAL computing environments
accounts_cs	ability to set common user account attributes (including passwords) in the CS-TEACHING and CS-GENERAL directory service ?
cscf-jobdesc	read access to CSCF job description details
mgmt	access to material that either CSCF or MFCF mgmt should have
source	historical means for access to software source
staff_cscf	CSCF staff members. This is also used to control administrative access to some research machines.
meeting	an historical equivalent to the staff_cscf group
xh-admin_cs	incomplete experiment in providing IST and MFCF staff access to CSCF software distribution machines
fmsadmin	administering the FileMaker server, used for some Grad Office and ISG data
bbabcs	access to BBA/BCS program files, mostly WWW pages
cs-anniversary	access to the WWW pages for the CS 40th anniversary
cs-photo	sharing of photos within CS, looks to be largely unused
www_cf	read/write access to WWW pages that CSCF and MFCF had in common -- largely historical
www_cscf	read/write access to CSCF WWW pages not otherwise controlled

Group	Provides
algcomp	?
ecom	?
faculty_cs	?
fip	?
fms-graddb-data	?
fms-graddb-read	?
fms-ogsas-read	?
gw	?
health-i	?
hpsoftware	?
icr_admin	?
kmsgrads	?
latin2010	?
lpaig	?
maple	?
mfcf-library	?
net2005	?
npsg_sim	?
npsg_w	?
sigsam	?
barbay	historical research group
ceras-doc	write access to CERAS related WWW pages (the "muscat" cluster)
users_bif	allowed to login to the corresponding research environment
users_ds	allowed to login to the corresponding research environment
users_gamay	allowed to login to the corresponding research environment
users_marroo	allowed to login to the corresponding research environment
users_nsm	allowed to login to the corresponding research environment
users_plg	allowed to login to the corresponding research environment
users_scg	allowed to login to the corresponding research environment
users_tcl	allowed to login to the corresponding research environment
users_watform	allowed to login to the corresponding research environment
admin_bif	allowed to administer the corresponding research environment
admin_cs	allowed to administer the corresponding research environment
admin_ds	allowed to administer the corresponding research environment
admin_marroo	allowed to administer the corresponding research environment
admin_nsm	allowed to administer the corresponding research environment
admin_plg	allowed to administer the corresponding research environment
admin_scg	allowed to administer the corresponding research environment
admin_tcl	allowed to administer the corresponding research environment
admin_watform	administrative access to some research systems in the WatForm research group
cs-adm	convenient access to some "cs-adm" account files, used for miscellaneous administration, e.g. mailing lists.
cs-info	convenient access to some "cs-info" account files, used for more general CS administrative information, accessible by all faculty
cs-review	convenient access by "cs-adm" to the obsolete "cs-review" account files
csgrad	convenient access to "csgrad" account files for the CS Grad Office staff
cscbce	write access to the WWW pages for the 2010 CSCBCE conference
cs-ugrad	write access to the Undergraduate area of the CS WWW space
cs-ugrec	write access the Undergraduate Recruiting Committee WWW pages
www_cs	read/write to many general CS WWW pages
www_research	read/write access to CS WWW pages related to research, e.g. technical reports and the research directory
www_grad	write access to the (CS grad WWW pages
www-ai	write access to the content for the corresponding WWW site
www-boutaba	write access to the content for the corresponding WWW site
www-chil	write access to the content for the corresponding WWW site
www-compstats	write access to the content for the corresponding WWW site
www-dmet	write access to the content for the corresponding WWW site
www-eccad	write access to the content for the corresponding WWW site
www-epad	write access to the content for the corresponding WWW site
www-penmath	write access to the content for the corresponding WWW site
www-qc	write access to the content for the corresponding WWW site
www-scg	write access to the content for the corresponding WWW site
www-sss	write access to the content for the corresponding WWW site
www_bcfm	write access to the content for the corresponding WWW site
www_db	write access to the content for the corresponding WWW site
www_hci	write access to the content for the corresponding WWW site
www_jis	write access to the content for the corresponding WWW site
www_softeng	write access to the content for the corresponding WWW site
www_tp	write access to the content for the corresponding WWW site
abstfind	write access to "abstfinder" WWW pages (Dan Berry's research - ST #78270)
csphotos	something to do with student class photos
cs-uops	access to CS Undergraduate Operations data
cs-eval	access to teaching evaluation info

The "CS-TEACHING" Directory Service

The "CS-TEACHING" directory service reports these CSCF staff group memberships.

Group	Provides
cs-marks	access to specialized assignment processing programs
cs_build	convenient access to locally built software, and in general for software useful to undergraduate technical support rather than specifically ISG supported courses
cs350_999	for students working together in that course

Group	Provides
cs246se-ta	?
db2as2	?
db2cs338	?
hsld	?
libvirtd	?
oracle_ac	?
se240-ta	?
staff_cs	?
acm00	used for competitors in the ACM contest
acm	used for the ACM contest (judging)
cccx	for the Canadian Computing Competition
consultant	convenient access to the consultant account in the Math Help Centre (run my MFCF)
classgroup	for access by course accounts to the `classgroup` command which dodges NFS limitations on group membership
math_0	Math students in Registrars data that don't have a year assigned
cs100_student	students of the course
cs115_student	students of the course
cs136_student	students of the course
cs200_student	students of the course
cs100_tutor	tutors of the course
cs200_tutor	tutors of the course
cs100_instructor	instructors of the course
cs200_instructor	instructors of the course
cs115ae	the Arab Emirates (i.e. Dubai) version of the course
cs116ae	the Arab Emirates (i.e. Dubai) version of the course
cs115aet	the Arab Emirates (i.e. Dubai) version of the course
cs116aet	the Arab Emirates (i.e. Dubai) version of the course
cs_instructor	instructors that have any group assignment
cs_tutor_ta	all tutors and TAs that have any group assignment
csadvisors	for convenient access to the files of the "csadvisors" account
cs100	for convenient access to material related to teaching that course
cs115	for convenient access to material related to teaching that course
cs116	for convenient access to material related to teaching that course
cs123	for convenient access to material related to teaching that course
cs124	for convenient access to material related to teaching that course
cs125	for convenient access to material related to teaching that course
cs126	for convenient access to material related to teaching that course
cs132	for convenient access to material related to teaching that course
cs133	for convenient access to material related to teaching that course
cs134	for convenient access to material related to teaching that course
cs135	for convenient access to material related to teaching that course
cs136	for convenient access to material related to teaching that course
cs137	for convenient access to material related to teaching that course
cs138	for convenient access to material related to teaching that course
cs145	for convenient access to material related to teaching that course
cs146	for convenient access to material related to teaching that course
cs200	for convenient access to material related to teaching that course
cs230	for convenient access to material related to teaching that course
cs234	for convenient access to material related to teaching that course
cs240	for convenient access to material related to teaching that course
cs241	for convenient access to material related to teaching that course
cs245	for convenient access to material related to teaching that course
cs246	for convenient access to material related to teaching that course
cs247	for convenient access to material related to teaching that course
cs251	for convenient access to material related to teaching that course
cs330	for convenient access to material related to teaching that course
cs343	for convenient access to material related to teaching that course
cs348	for convenient access to material related to teaching that course
cs350	for convenient access to material related to teaching that course
cs354	for convenient access to material related to teaching that course
cs436	for convenient access to material related to teaching that course
cs445	for convenient access to material related to teaching that course
cs454	for convenient access to material related to teaching that course
cs487	for convenient access to material related to teaching that course
cs488	for convenient access to material related to teaching that course
cs645	for convenient access to material related to teaching that course
cs654	for convenient access to material related to teaching that course
cs679	for convenient access to material related to teaching that course
cs688	for convenient access to material related to teaching that course
cs779	for convenient access to material related to teaching that course
cs788	for convenient access to material related to teaching that course
cs888	for convenient access to material related to teaching that course
se112	for convenient access to material related to teaching that course
se240	for convenient access to material related to teaching that course
cs100.t	an environment for testing assignments for that course
cs115t	an environment for testing assignments for that course
cs116t	an environment for testing assignments for that course
cs123t	an environment for testing assignments for that course
cs124t	an environment for testing assignments for that course
cs125t	an environment for testing assignments for that course
cs126t	an environment for testing assignments for that course
cs134t	an environment for testing assignments for that course
cs135t	an environment for testing assignments for that course
cs136t	an environment for testing assignments for that course
cs137t	an environment for testing assignments for that course
cs138t	an environment for testing assignments for that course
cs145t	an environment for testing assignments for that course
cs146t	an environment for testing assignments for that course
cs230t	an environment for testing assignments for that course
cs234t	an environment for testing assignments for that course
cs240t	an environment for testing assignments for that course
cs241t	an environment for testing assignments for that course
cs245t	an environment for testing assignments for that course
cs246t	an environment for testing assignments for that course
cs247t	an environment for testing assignments for that course
cs251t	an environment for testing assignments for that course
cs341t	an environment for testing assignments for that course
cs343t	an environment for testing assignments for that course
cs348t	an environment for testing assignments for that course
cs350t	an environment for testing assignments for that course
cs442t	an environment for testing assignments for that course
cs444t	an environment for testing assignments for that course
cs454t	an environment for testing assignments for that course
cs486t	an environment for testing assignments for that course
cs786t	an environment for testing assignments for that course
cs798t	an environment for testing assignments for that course
cs842t	an environment for testing assignments for that course
se112-t	an environment for testing assignments for that course
se112t	an environment for testing assignments for that course
se212-t	an environment for testing assignments for that course
se212t	an environment for testing assignments for that course
se240-t	an environment for testing assignments for that course
se240t	an environment for testing assignments for that course
cs247_NN	for students working together in that course
cs350_NNN	for students working together in that course
cs452_NN	for students working together in that course
cs125-ta	for Teaching Assistants for that course
cs134-ta	for Teaching Assistants for that course
cs230-ta	for Teaching Assistants for that course
cs234-ta	for Teaching Assistants for that course
cs240-ta	for Teaching Assistants for that course
cs241-ta	for Teaching Assistants for that course
cs246-ta	for Teaching Assistants for that course
cs251-ta	for Teaching Assistants for that course
cs350-ta	for Teaching Assistants for that course
cs452_sf	to control access to the train lab download directory
cs_1	first year CS students
cs_4	fourth year CS students
math_1	first year Math students
cssystems	storing tutorials that are useful for multiple courses
login_graphics	obsolete form of access control to student graphics lab machines
login_ug	obsolete form of access control to the teaching environment