ftp directory permissions

[bernd1205]

Hi @all,

i´m using ispcp for a while and i´m quite happy with it but i´ve currently run into a problem.

I need to write-protect some ftp directories for certain users, but i can´t get it working.

Here´s the scenario:

user1@domain.tld: main ftp-user, access to /ftp
user2@domain.tld: download ftp-user, access to /ftp/down

user2 should not be able to create/delete files under /ftp/down (which is his homedir)
user1 should be able to create/delete files.

As i´ve understood the setup of ispcp both users do connect to proftpd with the same virtual uid, therefore i can´t restrict access in the way mentioned above.
I´ve already played around using different uid/gid but when changed, proftpd responded with login incorrect.

Is there any workaround for that ? Any help appreciated.

cheers
bernd

[joximu]

Hm - so user2 should only be abler to read in /ftp/down ?

This could be solved with a restricted webpage.

Or what exactly is the idea for user2?

/J

[bernd1205]

Yes - that´s the plan. User2 should only be allowed to read within /ftp/down.

The user is supposed to connect with a ftp-client like filezilla, possibly later on with a scripted solution.
I thought the protected webpages would only work within browsers ?

[joximu]

well - of course - protected webpages are accessed with a browser. But it's a good alternative if you need a read-only login...
can also be scripted...

Does user2 need read access to the whole ftp/down folder or only to some part of it?

/J

[bernd1205]

access should be to the whole directory as user1 will upload regularly different project files.

[joximu]

well then I only see the solution via browser...

or you might make some cron scripts which copy the content of /ftp/down to /ftp/down2 and set some flags for user2 can only read this...

/J