[Pansophy] Mircea - change permission on M-driver folder LCLS-II (Why did you lock down the entire directory?)

[Mircea Stirbet]

 Hi  Val,

Lets keep the same folder on M drive I was using,  just for LCLS-II FPCs - with restricted access (for the moment, with permission granted only to me and Naeem),  as was specified in the IT request.

Hope it will be possible to clean out the all issues related with the other users.

Take care and be safe,
Mircea





________________________________
From: Valerie Bookwalter <bookwalt at jlab.org>
Sent: Thursday, June 3, 2021 19:54
To: Mircea Stirbet <stirbet at jlab.org>
Cc: SRF Pansophy (pansophy at jlab.org) <pansophy at jlab.org>; Kirk Davis <kdavis at jlab.org>; Tony Reilly <areilly at jlab.org>; E. Anne McEwen <mcewen at jlab.org>; Ed Daly <edaly at jlab.org>
Subject: Re: Mircea - change permission on M-driver folder LCLS-II (Why did you lock down the entire directory?)

Thank you for the information Mircea!
That really helps me to understand what is going on.
I will email the IT helpdesk and try to get this sorted out.

You need your FPC area locked down to you and Naeem, correct?
Is the for LCLS-II and/or LCLS-II HE area(s)?

I am sorry for my delay in responding to your email. Truly sorry.
When I did go to help today, that's when I discovered that all directories were locked.
Again, THANK YOU for the information. I will keep you posted on response from helpdesk.

Valerie

________________________________
From: Mircea Stirbet <stirbet at jlab.org>
Sent: Thursday, June 3, 2021 6:54 PM
To: Valerie Bookwalter <bookwalt at jlab.org>
Cc: SRF Pansophy (pansophy at jlab.org) <pansophy at jlab.org>; Kirk Davis <kdavis at jlab.org>; Tony Reilly <areilly at jlab.org>; E. Anne McEwen <mcewen at jlab.org>; Ed Daly <edaly at jlab.org>; Mircea Stirbet <stirbet at jlab.org>
Subject: Re: Mircea - change permission on M-driver folder LCLS-II (Why did you lock down the entire directory?)

Hi Val,

I did NOT lock down anything, really I do not know how to change access permissions to any folders on M-drive.

At the beginning of May I sent you an email related with permission access to the FPC folder on M-drive. I see you refer my email to this chain... As I got no answer, I made a request via IT Service Desk (INC0044031).

Here you have the full email text requesting IT support, and as you can see, I even mentioned your name:

Need help to change/control access permissions to a M-drive folder used to store sensitive information related with FPCs for LCLS project.

Here you have the link for this folder (already with about 15 GB of data, and supposed to be bigger).
M:\asd\asddocs\LCLS-II.

Valery initiated this folder for LCLS-II several years ago.

At this time, Everyone has access, and I request denying Everyone group access to LCLS-II and grant full access to a limited number of persons, for the near future to just two person: Mircea Stirbet -stirbet at jlab.org, Naeem Huque- huque at jlab.org.

Was not able to do myself these permission changes, got a message , "Unable to save permission changes on LCLS-II. Access denied".

Thank you,
Mircea Stirbet

When I asked the IT service for  permission changes, the LCLS-II folder on M-drive, was used only for LCLS-II FPC. From your email I am learning that quite a number of users are now affected, not having access to the LCLS-II FPC files.

I do not know what IT Service was doing, why they granted access to SRFDATA/changed permission access to so many persons.

I suppose, all issues you are mentioning in your email could also be solved by the IT Service. Shall I forward your email to IT Service?

Please let me know how I can help you.
Thanks,
Mircea



________________________________
From: Valerie Bookwalter <bookwalt at jlab.org>
Sent: Thursday, June 3, 2021 16:04
To: Mircea Stirbet <stirbet at jlab.org>
Cc: SRF Pansophy (pansophy at jlab.org) <pansophy at jlab.org>; Kirk Davis <kdavis at jlab.org>; Tony Reilly <areilly at jlab.org>; E. Anne McEwen <mcewen at jlab.org>; Ed Daly <edaly at jlab.org>
Subject: RE: Mircea - change permission on M-driver folder LCLS-II (Why did you lock down the entire directory?)


Mircea,



I see you changed ALL the permissions for M:/asd/asddata/LCLS-II.

You have locked a lot of people out of the area and not just the FPC directory.

This directory was setup for the entire project with a sub-directory for your FPC data.

If you need a directory just for your FPC Data then we should create another directory and not close down the entire LCLS-II area.



Additionally, this area is under the group “SRFDATA” which includes the following persons:

srfdata:*:562:kdavis,powers,srs-ee, grenoble,king,drury,preble,kneisel,kushnick,haipeng,morrone,reece,stirbet,adapps,cheng,marhause,satogata,shabalin,edaly,huque,marchlik,powen,mcewen,dsavr,jtkent,ganey,aobrien



Can we work something out to protect the sensitive data without locking others out from adding their data?



Thank You for your help.





Valerie Bookwalter

Jefferson Lab, SRF Department

Pansophy Team

1-757-813-6716 (CELL)

1-767-269-5802 (OFFICE – currently working offsite)





From: Mircea Stirbet <stirbet at jlab.org>
Sent: Tuesday, May 11, 2021 8:29 AM
To: Valerie Bookwalter <bookwalt at jlab.org>
Cc: Mircea Stirbet <stirbet at jlab.org>
Subject: Mircea - change permission on M-driver folder LCLS-II



Good morning Val,

Several years ago, you help me and set up a folder LCLS-II (on M-Drive) and I was using it to collect some FPC related files.



M:\asd\asddocs\LCLS-II



Can you please help me to have better control of this folder? (or let me know whom I have to ask for). At this moment,  everyone has full access and... some files supposed to be saved here are sensitive.



Tried myself to make these changes and .. I got this error



[cid:image001.png at 01D75892.1EFC7510]



Take care and be safe,

Mircea
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.jlab.org/pipermail/pansophy/attachments/20210604/6a074929/attachment-0001.html>