liveBook · Manning

Unix file permissions

As explained in Authorization in Action

A Unix operating-system mechanism that assigns read, write, and execute rights to files and directories for owners, groups, and other users.

Unix file permissions provide a compact, resource-attached access-control model. Each file or directory assigns read, write, and execute rights to three principal categories: the owner, a specific group, and everyone else. section 5.1

The model is a simplified access control list (ACL): permissions are evaluated at access time, but assignments remain limited to fixed owner, group, and others roles rather than arbitrary named users. section 5.1

Reading a permission listing

For “-rwxr-xr-- 1 alice devs deploy.sh”, Alice can read, write, and execute the script; members of devs can read and execute it; everyone else can only read it. section 5.1

How Authorization in Action covers it

How deep it goes
Defines three principal categories and three actions, then interprets one listing; it stops short of command-level configuration.
Examples
Interprets the deploy.sh listing for Alice, the devs group, and everyone else.
What you can do after
Evaluate read, write, and execute access from a Unix permission listing for an owner, group, and other users.
How it connects
Connects Unix permissions to access control lists, resource ownership, principals, groups, and static authorization.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Authorization in Action. The section links point to the parts of the book it draws on.