protectvob

Changes owner or groups of a VOB

APPLICABILITY

SYNOPSIS

protectvob [ -f·orce ] [ -cho·wn user ] [ -chg·rp group ]

[ -add·_group group[,...] [ -del·ete_group group[,...] ]
vob-storage-pname ...

DESCRIPTION

protectvob manages the ownership and group membership of the files and directories in a VOB, by changing the OS-level permissions on files and directories within the VOB storage area.

ClearCase on UNIX only-If the VOB has remote storage pools, you may need to execute this command on the remote host also to complete the permissions update.

RESTRICTIONS

Identities: You must have one of the following identities:

• root (UNIX)

• Local administrator of the VOB server host (Windows)

NOTE: You cannot use the -add_group option to add the ClearCase administrators group. This group already has rights to all VOB objects.

Locks: An error occurs if one or more of these objects are locked: VOB.

Mastership: (Replicated VOBs only) If your current replica is ownership-preserving, it must master the VOB. If your current replica is non-ownership-preserving, no mastership restrictions apply.

OPTIONS AND ARGUMENTS

CONFIRMATION STEP.  Default: protectvob asks for confirmation before changing the permissions in one or more storage pools.

-for·ce

Suppresses the confirmation step.

CHANGING VOB OWNERSHIP.  Default: None. You can use -chown by itself, or in combination with -chgrp.

NOTE TO WINDOWS USERS: A member of the Backup Operators or Administrators group can change ownership of any VOB with protectvob -chown. If you are the VOB owner, you can change ownership of that VOB by running protectvob -chown user as yourself, andthen logging in as user and running protectvob -force vob-storage-pname with no other options.

-cho·wn user

Specifies a new VOB owner, who becomes the owner of all the VOB's storage pools and all of the data containers in them. user can be a login name or

UNIX-a numeric user-ID. protectvob rebuilds the .identity subdirectory of the VOB storage directory, reflecting the new VOB owner's user-ID, group-ID, and additional groups (if any).

Windows-the numeric user-ID displayed by ccase-home-dir\etc\utils\creds username (this is not the same as the Windows NT Security Identifier). protectvob rebuilds the Security Descriptor on the VOB root directory (on NTFS only) and the identity.sd and group.sd files in the VOB storage directory, reflecting the new VOB owner's user-ID, group-ID, and additional groups (if any).

-ch·grp group

Specifies a new principal group for the VOB. group can be a group name or

UNIX-a numeric group-ID

Windows-the numeric group-ID displayed by ccase-home-dir\etc\utils\creds -g groupname.

MAINTAINING THE SECONDARY GROUP LIST.  Default: None. You can use -add_group and -delete_group singly, or together.

-add·_group group[,...]

Adds one or more groups to the VOB's secondary group list. group can be a group name or

UNIX-a numeric group ID

Windows-a numeric group-ID displayed by ccase-home-dir\etc\utils\creds -g groupname (Windows).

You must enclose group names that contain spaces in double quotes.

-del·ete_group group[,...]

Deletes one or more groups from the VOB's secondary group list. group can be a group name or

UNIX-a numeric group-ID

Windows-the numeric group-ID displayed by ccase-home-dir\etc\utils\creds -g groupname. You must enclose group names that contain spaces in double quotes.

SPECIFYING THE VOB. Default: None.

vob-storage-pname

Local pathname of a VOB storage directory.

EXAMPLES

The UNIX examples in this section are written for use in csh. If you use another shell, you may need to use different quoting and escaping conventions.

The Windows examples that include wildcards or quoting are written for use in cleartool interactive mode. If you use cleartool single-command mode, you may need to change the wildcards and quoting to make your command interpreter process the command appropriately.

In cleartool single-command mode, cmd-context represents the UNIX shell or Windows command interpreter prompt, followed by the cleartool command. In cleartool interactive mode, cmd-context represents the interactive cleartool prompt. In Attache, cmd-context represents the workspace prompt.

• On a UNIX system, make user jackson the owner of the VOB whose storage area is /usr/lib/vob.vb.

cmd-context protectvob -chown jackson /usr/lib/vob.vb
This command affects the protection on your versioned object base.
While this command is running, access to the VOB will be limited.
If you have remote pools, you will have to run this command remotely.
Pool "sdft" needs to be protected correctly.
Pool "ddft" needs to be protected correctly.
Pool "cdft" needs to be protected correctly.
Protect versioned object base "/usr/lib/vob.vb"? [no] yes
Do you wish to protect the pools that appear not to need protection? [no] no
Protecting "/usr/lib/vob.vb/s/sdft"...
Protecting "/usr/lib/vob.vb/s/sdft/0"...
Protecting "/usr/lib/vob.vb/s/sdft/1"...
...

Protecting "/usr/lib/vob.vb/d/ddft"...
Protecting "/usr/lib/vob.vb/d/ddft/0"...
...
Protecting "/usr/lib/vob.vb/c/cdft"...
Protecting "/usr/lib/vob.vb/c/cdft/2d"...
Protecting "/usr/lib/vob.vb/c/cdft/35"...
...
VOB ownership:
owner jackson
group user
Additional groups:
group doc

Change the owner and group of a remote VOB storage pool.

% rlogin ccsvr01

Password:
<enter password>

% /usr/atria/etc/chown_pool jackson.user /vobaux/vega_src/s001

• On a Windows system, make user smg the owner of the VOB whose storage area is c:\vobs\docs.vbs.

cmd-context protectvob -chown smg c:\vobs\docs.vbs
This command affects the protection on your versioned object base.
While this command is running, access to the VOB will be limited.
Pool "sdft" appears to be protected correctly.
Pool "ddft" appears to be protected correctly.
Pool "cdft" appears to be protected correctly.
Protect versioned object base "c:\vobs\docs.vbs"? [no] yes
Do you wish to protect the pools that appear not to need protection? [no] no
VOB ownership:
  owner smg
  group user
Additional groups:
  group Backup Operators

• On a UNIX systems, add one group to a VOB's group list, and remove another group.

cmd-context protectvob -add_group devel -delete_group doc /usr/lib/vob.vb
This command affects the protection on your versioned object base.
While this command is running, access to the VOB will be limited.
If you have remote pools, you will have to run this command remotely.
Pool "sdft" appears to be protected correctly.
Pool "ddft" appears to be protected correctly.
Pool "cdft" appears to be protected correctly.
Protect versioned object base "/usr/lib/vob.vb"? [no] yes
Do you wish to protect the pools that appear not to need protection? [no] no
VOB ownership:
owner jackson
group user
Additional groups:
group devel

• On a Windows system, add the group Doc Group to a VOB's group list.

cmd-context protectvob -add_group "Doc Group" c:\vobs\docs.vbs
This command affects the protection on your versioned object base.
While this command is running, access to the VOB will be limited.
Pool "sdft" appears to be protected correctly.
Pool "ddft" appears to be protected correctly.
Pool "cdft" appears to be protected correctly.
Protect versioned object base "c:\vobs\docs.vbs"? [no] yes
Do you wish to protect the pools that appear not to need protection? [no] no
VOB ownership:
  owner smg
  group user
Additional groups:
  group Backup Operators
  group Doc Group

SEE ALSO

chpool, mkpool, mkvob, protect, Administrator's Guide