SRM-PERMISSION-SET: BeStMan SRM-Client Tools User's Guide

• srm-permission-set requests to set permissions on SURLs.

Usage

• srm-permission-set <source_url> [command line options]
• srm-permission-set -f <input_file> [command line options]

Options

• Command line options take priority from the options from conf file.
• Options in the following table are in alphabetical order

-authid <string>	Authorization ID to be used in SRM for the request
-conf <path>	Path to the configuration file. Command line options will override the options from conf file
-connectiontimeout <int>	enforces http connection timeout in the given seconds. Default=1800
-debug	Specifies debugging output Default=false
-delegation <true¶false>	Force proxy delegation. When not provided, srm client makes no delegation by default, and automatically handles proxy delegation based on the source URLs. When -delegation is provided, it overrides the automatic handling and forces the user choice.
-f <path>	Path to the xml input file containing the source url information for requests with more than one file Refer to the format and an example
-grouppermissions <group:mode>	Specifies group permission mode Mode is specified by none¶x¶w¶wx¶r¶rx¶rw¶rwx Comma separated list E.g. group1:rw,group2:r,group3:r
-help	Show the help message
-log <path>	Specifies path to log file Default=./srmclient-event-date-random.log
-otherpermission <none¶x¶w¶wx¶r¶rx¶rw¶rwx>	Specifies other permission mode
-ownerpermission <none¶x¶w¶wx¶r¶rx¶rw¶rwx>	Specifies owner permission mode
-permissiontype <add¶remove¶change>	Specifies permission type to request
-proxyfile <path>	Path to user grid proxy
-quiet	Suppress output in the console. This option writes the output to the log file. Default=false
-s <source_url>	source URL
-serviceurl <endpoint>	Full web service endpoint Required when source url or target url does not contain web service endpoint information
-sethttptimeout <int>	set client-side http connection timeout in the given seconds. Default=600
-storageinfo <string>	extra storage access information For BeStMan supporting MSS, a formatted input separated by comma is used with following keywords when necessary: for:<source¶target¶sourcetarget>,login:<string>,passwd:<string>,projectid:<string>,readpasswd:<string>,writepasswd<string>
-usercert <path>	Path to user grid certificate
-userkey <path>	Path to user grid certificate key
-userpermission <user:mode>	Specifies user permission mode Mode is specified by none¶x¶w¶wx¶r¶rx¶rw¶rwx Comma separated list e.g. user1:rw,user2:r,user3:r

Notes

• srm client makes no proxy delegation by default, and automatically handles proxy delegation based on the source urls. A user can override the automatic handling by providing an option “-delegation” (or “-delegation true”) to force the delegation, and “-delegation false” to force no delegation. “-debug” option would show how the delegation is done on the output.

Input file format

  
    Source_URL
  

• Example 1

  
    srm://bestman.lbl.gov:8443/srm/v2/server?SFN=/mydir/mypath/myfile
  

Examples

Set permission information on a file

• srm-permission-set -s srm://host:port/wsept?SFN=/source_filepath -permissiontype <type> -userpermissions <user:mode> -grouppermissions <group:mode> -otherpermission <mode>
• This command requests to set the permission information on the SURL. Click here for the sample output.
• srm-permission-set srm://bestman.lbl.gov:8443/srm/v2/server?SFN=/srmcache/guest/test.data -permissiontype add -userpermissions “user1:rw,user2:r,user3:r”
• srm-permission-set srm://bestman.lbl.gov:8443/srm/v2/server\?SFN=/srmcache/guest/test.data -permissiontype add -grouppermissions “group1:rw,group2:r”
• srm-permission-set srm://bestman.lbl.gov:8443/srm/v2/server\?SFN=/srmcache/guest/test.data -permissiontype add -otherpermission r
• srm-permission-set srm://bestman.lbl.gov:8443/srm/v2/server\?SFN=/srmcache/guest/test.data -permissiontype add -userpermissions “user1:rw,user2:r,user3:r” -grouppermissions “group1:rw,group2:r” -otherpermission r
• srm-permission-set srm://bestman.lbl.gov:8443/srm/v2/server\?SFN=/srmcache/guest/test.data -permissiontype change -userpermissions “user1:r” -grouppermissions “group1:r” -otherpermission none

Troubleshooting

• None reported

See Also

• srm-util, srm-permission-check, srm-permission-get
• BeStMan SRM-Client Tools User's Guide: Client commands and samples