After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 40989 - Nautilus permission check will think some operations are allowed on file systems where they really are not
Nautilus permission check will think some operations are allowed on file syst...
Status: RESOLVED OBSOLETE
Product: nautilus
Classification: Core
Component: File and Folder Operations
2.2.x
Other Linux
: Normal minor
: ---
Assigned To: Nautilus Maintainers
Nautilus Maintainers
Depends on:
Blocks: 62817
 
 
Reported: 2000-05-25 21:08 UTC by Maciej Stachowiak
Modified: 2009-06-12 23:14 UTC
See Also:
GNOME target: ---
GNOME version: 2.9/2.10



Description Maciej Stachowiak 2001-09-10 00:34:11 UTC
Here are some cases where this may be true. Using access() through an
appropriate gnome-vfs cover may or may not help some of these cases.

* AFS uses ACLs (Access Control Lists) to represent file permissions. Although
it reports user-group-other permissions, they are essentially ignored. So trying
to use these permissions will result in completely incorrect results.

* Native filesystems on un*x systems that support ACLs (for example, Solaris and
other proprietary unixen; and similar functionality is under development for
Linux) because then the real check the kernel uses is the ACLs, not the checks
described above.

* On some systems that have "capabilities" support, a user other than uid 0 may
have permission to real all files via a "capability".

* NFS typically "quashes" UID 0 - that is, being UID 0 on the client machine
does not give you universal read/write capability on the host machine.

* NFS servers may do even more complex UID mappings than that - the client UID
may be mapped to a completely different UID on the server. The access(2) man
page implies that even access() will not return correct results for this case! I
don't really know much about the specifics of this problem though.

* When mounting windows file shares (SMB) on a Linux system, Unix
user/group/owner permissions are approximated, but the server actually uses a
different check, so again looking at the permissions may give incorrect results.

* The permissions of the file may change between when we do the test and when we
do the operation.

* For gnome-vfs file systems like http or ftp, our permissions are not tied to
our unix UID or group at all, but rather to some different model of permissions;
for ftp this could be the user we are logged into the ftp site as, for http it
could be based on an htaccess file on the server (which is essentially a model
like ACLs).



------- Additional Comments From darin@bentspoon.com 2000-05-25 17:14:22 ----

This is OK if inconvenient because we will report the errors well. Of course
it's even better if we handle these better.

Once we find specific cases, we may want to write separate bug reports.



------- Additional Comments From eli@eazel.com 2000-10-16 20:17:51 ----

Batch-assigning QA ownership of remaining bugs to eli@eazel.com



------- Additional Comments From snickell@stanford.edu 2001-07-23 00:35:46 ----

Taking bugs previously assigned to Pavel, assigning them to myself. Will parse
them out at my leisure , but many are GnomeVFS bugs we should look at for 2.0



------- Bug moved to this database by unknown@bugzilla.gnome.org 2001-09-09 20:34 -------
Comment 1 John Fleck 2002-01-05 04:07:00 UTC
Changing to "old" target milestone for all bugs laying around with no milestone set.
Comment 2 Luis Villa 2002-10-31 13:26:36 UTC
Given that Darin says we report the errors well, marking minor.
Comment 3 Aschwin van der Woude 2003-05-02 18:49:54 UTC
Setting GNOMEVER2.3, assuming this bug is still valid.

Bug #105391 requests ACL support, which would even be better.
Adding it as a dependency.
Comment 4 Stephane Wirtel 2005-01-26 22:05:04 UTC
Sorry, but i close this bug, because I don't find more details.

Feel free to reopen with the asked details
Comment 5 Vincent Untz 2005-01-28 12:53:04 UTC
Stephane: nobody asked for more details.
Comment 6 Christian Neumair 2005-12-21 23:11:15 UTC
gicmo: Is this fixed with the GNOME_VFS_FILE_INFO_FIELDS_ACCESS stuff introduced in Nautilus 2.13?
Comment 7 André Klapper 2008-11-15 18:56:17 UTC
Is this still an issue in a current version like 2.22 or 2.24?
Comment 8 Tobias Mueller 2009-06-12 23:14:51 UTC
I assume it's not. Please reopen if it still is.