#
# /adm/etc/access
#
# determines group and user access to the filesystem
# this works similarly to the groups file
# 
# (directory or file)	(userlist)
# after each user or group in the userlist, you should have [] with r in it
# for read access, w in it for write access.  If either letter is preceeded
# by a '-', it implies negative access.   
#
#
# magic groups:
#	(all) - all users


# admins can write to everywhere, all can read everywhere
(/)             (admin)[rw]:(all)[r]

# nobody can do anything here
(/adm/tmp)	(admin)[rw]:(all)[]
(/adm/priv)     (admin)[rw]:(all)[]
(/d/Root)	(all)[]

# nobody can write here but root
(/adm/log)	(all)[r]
(/driver)	(all)[r]

# allow everyone write access to /tmp
(/tmp)		(all)[rw]

# documentation can write docs!
(/doc)		(all)[r]:(admin)[rw]:(documentation)[rw]
(/www)		(all)[r]:(admin)[rw]:(www)[rw]

# everyone can read in /u, but only admins can write to other homedirs
(/u)            (all)[r]:(admin)[rw]

# student dirs, teachers can write there
(/student)	(all)[r]:(admin)[rw]:(teachers)[rw]

# All the domains
(/d/std)	(all)[r]:(standard)[rw]:(admin)[rw]
(/d/TMI)	(all)[r]:(tmi)[rw]:(admin)[rw]
(/d/Fooland)	(all)[r]:(fooland)[rw]:(admin)[rw]
(/d/Conf)	(all)[r]:(conf)[rw]:(admin)[rw]
(/d/adm)	(all)[r]:(adm)[rw]:(admin)[rw]

# news directory permissions
(/data/news)	(all)[]:(news)[rw]:(admin)[rw]

# Hide the user data to prevent dictionary hacks of passwords.
(/data/std)	(all)[]:(admin)[rw]
# mail permissions
(/data/mail)	(all)[]:(mailpeople)[rw]:(backbone)[rw]:(admin)[rw]
(/data/omail)	(all)[]:(admin)[rw]:(backbone)[rw]
(/data/attic/mail)	(all)[]:(admin)[rw]:(backbone)[rw]

# ftp transfer directory...
(/ftp)         (all)[rw]

# open space
(/open)       (all)[rw]

# temp by Leto
(/log/admin)	(admin)[rw]:(all)[]
