This is available via the final_script
option in .submitrc
, and is located at /u/isg/bin/submit/submit_permissions_hook
. It simply changes the default permissions on handin directories after submit completes running to reduce the risk that course staff accidentally modify the submissions.
submit_permissions_hook — Tighten file permissions on files accepted by submit
Inside of the course's /u/
there should be the following line:
csXXX
/.submitrc
final_script=/u/isg/bin/submit/submit_permissions_hook
By default, submit leaves submission folders with permissions that allow course staff to modify submissions accidentally. This program will tighten file permissions, explicitly removing all world and group permissions from the submission folder and files and leaving user with no write permissions. Since RST actually duplicates the submission directory and passes a readable duplicate to its runTests script, the removal of group permissions should not impact the ability of the testing account to see the submissions.