Problems of access rights between sao and proteus

Support Developer
1

as shown here : Attachement with proteus

when you deal with protheus and sao for attachments (in the file systems) the system rights management cannot permit tryton-sao to manage tryton-proteus files.

we could use a cron task to change recursively owners but it is so bad practice. Is there a way somewhere to tell tryton-sao to be able to manage tryton-protheus files ?

2

i solved it.

tryton must be in the user using protheus group

3

there is still a problem when the file you want to create must be in a directory created by tryton

4

well the solution is not so simple

  1. tryton-server must run under another-group

in /usr/lib/systemd/system/tryton-server.service

it could (should) be

/usr/lib/systemd/system/tryton-server-uwsgi@.service

set tryton’s group with the one you want to share attachments

[Service]
User=tryton
Group=THE_GROUP

  1. let directories created be rwx for the group

setfacl -m “default:group::rwx” /var/lib/tryton
setfacl -m “default:group::rwx” /var/lib/tryton/tryton

  1. for directories already created

hmod -R g+x /var/lib/tryton
chmod -R g+w /var/lib/tryton

  1. restart tryton server