[gpfsug-discuss] restrict user quota on specific filesets

[Jonathan Buzzard]

On Fri, 2017-08-04 at 16:45 +0200, Kenneth Waegeman wrote:
> Hi,
> 
> Is it possible to let users only write data in filesets where some quota 
> is explicitly set ?
>
> We have independent filesets with quota defined for users that should 
> have access in a specific fileset. The problem is when users using 
> another fileset give eg global write access on their directories, the 
> former users can write without limits, because it is by default 0 == no 
> limits.

Setting appropriate ACL's on the junction point of the fileset so that
they can only write to file sets that they have permissions to is how
you achieve this.

I would say create groups and do it that way, but *nasty* things happen
when you are a member of more than 16 supplemental groups and are using
NFSv3 (NFSv4 and up is fine). So as long as that is not an issue go nuts
with groups as it is much easier to manage.

> Setting the quota on the file system will only restrict users quota in 
> the root fileset, and setting quota for each user - fileset combination 
> would be a huge mess. Setting default quotas does not work for existing 
> users.

Not sure abusing the quota system for permissions a sensible approach.
Put another way it was not designed with that purpose in mind so don't
be surprised when you can't use it to do that.

JAB.

-- 
Jonathan A. Buzzard                         Tel: +44141-5483420
HPC System Administrator, ARCHIE-WeSt.
University of Strathclyde, John Anderson Building, Glasgow. G4 0NG