SnapshotCM Tips and Tricks

• Question: We are hiring a contractor and want to restrict their access to just one project. However, we are currently using the everyone group. What do you suggest?
  Answer: Create two new SnapshotCM group accounts and put all your users in one and your contractor in the other. Then add your employee group to all snapshot and project ACLs, add your contractor group to just those snapshot ACLs you want them to access, and remove the everyone group from all snapshots and projects.
  
  To do this efficiently, especially if you have many snapshots, projects and project folders, use the cmacl command.
• Command Highlight: cmacl
  The cmacl command displays, modifies and sets the SnapshotCM access control lists in the SnapshotCM database. We will use the problem above to illustrate how to use cmacl. To add the "team" group to all projects, folders and snapshots, run the following command:

  sslist -hhost -HR |
  sed -e 's: :\\ :' |
  xargs cmacl -hhost -P -e +g:team=VRW

  To remove the everyone group, use the cmacl command:

  cmacl -hhost -P -e -g:everyone

  These can be combined as in:

  cmacl -hhost -P -e -g:everyone,+g:team=VRW

  For additional examples of using the cmacl command, see the cmacl manual page.