NAME

       lfc-getacl - get LFC directory/file access control lists

SYNOPSIS

       lfc-getacl [-a] [-d] path...

DESCRIPTION

       lfc-getacl  gets  the  Access Control List associated with a LFC directory/file.  For each
       path, it  displays the file name, owner, the group, and the Access Control List  (ACL)  if
       present.  If  a  directory  has  a  default ACL, lfc-getacl also displays the default ACL.
       Regular files cannot have default ACLs.

       The output looks like:

            # file: filename
            # owner: username
            # group: groupname
            user::perm
            user:uid:perm
            group::perm
            group:gid:perm
            mask:perm
            other:perm
            default:user::perm
            default:user:uid:perm
            default:group::perm
            default:group:gid:perm
            default:mask:perm
            default:other:perm

       The first "user" entry gives the permissions granted  to  the  owner  of  the  file.   The
       following  "user"  entries show the permissions granted to specific users, they are sorted
       in ascending order of uid.  The first "group" entry gives the permissions granted  to  the
       group  owner  of  the file.  The following "group" entries show the permissions granted to
       specific groups, they are sorted in ascending order of  gid.   The  "mask"  entry  is  the
       maximum  permission  granted  to specific users or groups.  It does not affect the "owner"
       and "other" permissions.  The "mask" entry must be present if there are specific "user" or
       "group"  entries.   "default"  entries associated with a directory are inherited as access
       ACL by the files or sub-directories created in that directory.  The  umask  is  not  used.
       Sub-directories  also  inherit  the  default  ACL as default ACL.  As soon as there is one
       default ACL entry, the 3 default ACL base entries (default user,  default  group,  default
       other) must be present.

       The entry processing conforms to the Posix 1003.1e draft standard 17.

       path   specifies  the  LFC pathname.  If path does not start with /, it is prefixed by the
              content of the LFC_HOME environment variable.

       uid    is displayed as the username if known else as the numeric id.

       gid    is displayed as the groupname if known else as the numeric id.


       perm   is expressed as a combination of characters rwx-

OPTIONS

       -a     only display the access ACL.

       -d     only display the default ACL.

EXAMPLES

       lfc-getacl /grid/atlas/test/file.log/d2

       # file: /grid/atlas/test/file.log/d2
       # owner: baud
       # group: c3
       user::rwx
       group::r-x              #effective:r-x
       other::r-x
       default:user::rwx
       default:group::r-x
       default:other::r-x

EXIT STATUS

       This program returns 0 if the operation was successful or >0 if the operation failed.

SEE ALSO

       Castor_limits(4), lfc_chmod(3), lfc_chown(3)

AUTHOR

       LCG Grid Deployment Team