Skip to content Skip to site navigation

Manage PTS Groups

Overview

Note: This utility is used to create and manage personally defined pts groups. Groups created by the system administrators to manage group and department AFS directories cannot be managed through this utility.

A pts group (sometimes referred to as a protection group) is a list of specific users that you can place on access control lists (ACLs). It provides a way to give permissions to a set of directories to many people.

You own all the files and subdirectories in your account, and you can determine who gets access to your files. You can create your own groups of people, and then give them permissions to your files. When you create a pts group, you automatically become its owner. Only the owner of a group can add members, remove members, or delete the group entirely.

In AFS, permissions are set by directory, not by file. Every file in a directory has the same permission. New sub-directories inherit the permissions of their parent directories. An ACL can have up to twenty entries, but a pts group, regardless of the number of people in it, only counts as one entry. There is no restriction on the number of members in a pts group.

See Setting Permissions with Windows for more information.

Create a PTS group

  1. Right-click the red or gray S icon ( Stanford Desktop Tools icon ) in the notification area and then click Manage PTS Groups. (The notification area is located at the far right of the taskbar.)

    Stanford Desktop Tools shortcut menu

    Note: If you don't see a red or gray S icon ( Stanford Desktop Tools icon ) in the notification area, log in to OpenAFS. When the Mount AFS Volume window is displayed, go to the File menu and click Manage PTS Groups.
     
  2. In the PTS Group box, enter a name for your group and then click Create Group.

    create a PTS group

Add a member to a PTS group

  1. To add a member to a group, select the group by clicking it in the My Groups column.
     
  2. In the SUNet ID box, enter the SUNet ID of the person you want to add to the group. (This must be their true SUNet ID, not an alias)
     
  3. Click Add to Group. The SUNet ID of the person added will appear in the Group Members column.

    add members to PTS group

Remove a member from a PTS group

  1. To remove a member from a group, select the group by clicking it in the My Groups column.
     
  2. In the Group Members column, click the member you wish to remove.
     
  3. Click Remove Member.

    remove a member from a PTS group
     
  4. Click Yes to remove the member from the group.

    remove group member confirmaton message
     

Delete a PTS group

  1. Select the group you want to delete by clicking it in the My Groups column.
     
  2. Click the Delete Group button.

    delete a PTS group
     
  3. Click Yes to delete the pts group.

    delete PTS group confirmation message

Add a PTS group to an AFS access control list (ACL)

  1. In Stanford OpenAFS, mount the volume that contains the directory for which you want to add a pts group to the access control list. The volume will open in Windows Explorer. (If the volume is already mounted, navigate to the directory.)
     
  2. Right-click the directory and select AFS > Access Control Lists.

    access control list menu
     
  3. When the Set AFS ACL window is displayed, click Add.

    AFS Set ACL dialog box
     
  4. Check the boxes for the permissions you want to grant to the members of the pts group. In the Name field, enter the name of the pts group, which must start with your SUNet ID and a colon.

    Note: See More about Permissions for a description of each permission.

    set permissions for PTS group
     
  5. Click OK to close the Add ACL Entry dialog box.
     
  6. The name of the pts group now appears in the access control list. Click OK to close the window.

    Set AFS ACL dialog box with PTS group added
Last modified December 9, 2015