Ukunikezwa okukhulu kwamalungelo kubasebenzisi besizinda abavela emahlathini ahlukahlukene

Ngokusobala i-karma yami yile: ukwenza imisebenzi ejwayelekile kuzo zonke izinhlobo zezindlela ezingezona ezincane. Uma umuntu enombono ohlukile ngenkinga, sicela nixoxe ngayo ukuze udaba luxazululwe.

Ngolunye usuku ekuseni kwavela umsebenzi othakazelisayo wokusabalalisa amalungelo kumaqembu abasebenzisi amasheya ahlukene aqukethe amafolda amancane amaphrojekthi anamafolda amadokhumenti. Konke kwakuhamba kahle futhi umbhalo wabhalwa ukunikeza amalungelo kumafolda. Futhi-ke kwavela ukuthi amaqembu kufanele aqukathe abasebenzisi abavela ezizindeni ezahlukene, abavela emahlathini ahlukene (kulabo abakhohlwe ukuthi kuyini). Ake sithi isabelo ngokwaso sitholakala ku-Synology media, ebhaliswe kusizinda se-FB sehlathi le-PSI. Umsebenzi: ukuvumela abasebenzisi bezizinda kwelinye ihlathi ukuthi babe nokufinyelela kokuqukethwe kwalokhu kwabelana, futhi ngokukhetha kakhulu.

Ngemva kwesikhathi esithile, izici zobuchwepheshe zathatha ifomu elilandelayo:

  • Amahlathi ama-2: Ihlathi le-PSI, ihlathi le-TG.

    Ukunikezwa okukhulu kwamalungelo kubasebenzisi besizinda abavela emahlathini ahlukahlukene

  • Ihlathi ngalinye linezizinda ezi-3: PSI (ZG, PSI, FB); I-TG (TG, HU, KC).
  • Kukhona ubudlelwano bokuthembana phakathi kwamahlathi; I-Synology ibona wonke amaqembu ezokuphepha kuwo wonke amahlathi.
  • Amasheya namafolda/amafolda amancane kufanele abe nama-akhawunti omlawuli wesizinda se-FB anamalungelo e-FullControl
  • Amagama amafolda kufanele ahlelwe. Abaphathi baxhumanise ama-ID ephrojekthi; nginqume ukuxhuma igama lamaqembu okuvikela kuma-ID wephrojekthi.
  • Amafolda ephrojekthi kuzabelo zesistimu kufanele aqukathe isakhiwo esilungiselelwe kusengaphambili kufayela elithi .xlsx, elinamalungelo okufinyelela afanelekile (R/RW/NA, lapho i-NA – kungekho ukufinyelela)

    Ukunikezwa okukhulu kwamalungelo kubasebenzisi besizinda abavela emahlathini ahlukahlukene

  • Kufanele kwenzeke ukukhawulela amalungelo abasebenzisi/amalungu eqembu ephrojekthi eyodwa kuphela kunkhombandlela ethile yaleyo phrojekthi. Umsebenzisi angahle angakwazi ukufinyelela kwezinye izinkomba/amaphrojekthi, kuye ngobulungu beqembu.
  • Lapho udala ifolda yephrojekthi, amaqembu kufanele adalwe ngokuzenzakalela ezizindeni ezifanele ezinamagama ahambisana nama-ID wephrojekthi.

Amanothi ekucacisweni kobuchwepheshe

  • Ukusetha ubudlelwano bokwethembana akufakiwe kububanzi bezicaciso zobuchwepheshe
  • I-ID yephrojekthi iqukethe izinombolo nezinhlamvu zesiLatini
  • Izindima zabasebenzisi bephrojekthi kuzo zonke izizinda zinamagama ajwayelekile
  • Ifayela elithi .xlsx elinamafolda namalungelo okufinyelela (i-matrix yokufinyelela) lilungiswa ngaphambi kokuqala kwayo yonke iphrojekthi
  • Lapho usebenzisa amaphrojekthi, kungenzeka ukudala amaqembu abasebenzisi ezizindeni ezihambisanayo
  • Ukuzenzakalela kufinyelelwa ngokusebenzisa amathuluzi okuphatha we-MS Windows ajwayelekile

Ukuqaliswa kokucaciswa kobuchwepheshe

Ngemuva kokwenza lezi zidingo zibe semthethweni, kumiswe isikhashana ezindleleni zokuhlola zokudala uhla lwemibhalo nokunika amalungelo kuzo. Yayihloselwe ukusebenzisa i-PowerShell kuphela, ukuze ingaxabanisi iphrojekthi. Njengoba ngibhale ngaphambili, i-algorithm yeskripthi ibonakala ilula:

  • sibhalisa amaqembu ngegama elisuselwe ku-ID yephrojekthi (isibonelo i-KC40587) kanye nezindima ezihambisanayo ezicaciswe ku-matrix yokufinyelela: KC40587-EN- kanjiniyela; I-KC40587-PM - yomphathi womkhiqizo, njll.
  • sithola ama-SID amaqembu adaliwe
  • bhalisa ifolda yephrojekthi kanye nesethi ehambisanayo yezinkomba (uhlu lwamafolda amancane luncike ekwabeni okudalwe kulo futhi kuchazwe ku-matrix yokufinyelela)
  • nika amalungelo kumaqembu ezinhlokwana ezintsha zephrojekthi ngokuya nge-matrix yokufinyelela.

Ubunzima obuhlangabezene nabo esigabeni 1:

  • ukungaqondi kahle kwendlela yokucacisa i-matrix yokufinyelela kusikripthi (amalungu afanayo amaningi asetshenziswa manje, kodwa indlela yokuwagcwalisa ayafunwa ngokusekelwe kokuqukethwe kwefayela elithi .xlsx/access matrix)

    Ukunikezwa okukhulu kwamalungelo kubasebenzisi besizinda abavela emahlathini ahlukahlukene

  • ukuba nokwenzeka kokusetha amalungelo okufinyelela kumasheya e-SMB kumadrayivu e-syncology kusetshenziswa i-PoSH (https://social.technet.microsoft.com/Forums/en-US/3f1a949f-0919-46f1-9e10-89256cf07e65/error-using-setacl-on- nas -share?forum=winserverpowershell), ngenxa yalokho okwalahleka isikhathi esiningi futhi yonke into kwadingeka iguqulelwe kumaskripthi kusetshenziswa insiza yokuhlela amalungelo okufinyelela icacls, eyayidinga ukwakhiwa kwenqolobane emaphakathi yombhalo namafayela e-cmd.

Kumodi yamanje, ukwenziwa kwamafayela e-cmd kulawulwa ngesandla, kuye ngesidingo sokubhalisa ifolda yephrojekthi.

Ukunikezwa okukhulu kwamalungelo kubasebenzisi besizinda abavela emahlathini ahlukahlukene

Kubuye kwavela ukuthi umbhalo kufanele futhi ubulawe ukubhalisa amaqembu kwamanye amahlathi (igama elithi Cross-domains lisetshenzisiwe), futhi isilinganiso asikwazi nje kuphela 1 kuya kweyodwa, kodwa futhi 1 kwabaningi.

Ukunikezwa okukhulu kwamalungelo kubasebenzisi besizinda abavela emahlathini ahlukahlukene

Lokhu kusho ukuthi amaqembu asuka kwezinye izizinda ezihlukene, okuhlanganisa ihlathi elingumakhelwane, manje angafuna ukufinyelela kuzinsiza zanoma yisiphi isizinda. Ukuze kuzuzwe ukufana, kunqunywe ukuthi kwakhiwe isakhiwo esilinganayo ku-OU yazo zonke izizinda ezihlinzekwa ngesevisi zawo wonke amahlathi (ama-ovals amnyama aqondile). Njengoba besho, ebuthweni konke kufanele kube kubi, kodwa umfaniswano:

Ukunikezwa okukhulu kwamalungelo kubasebenzisi besizinda abavela emahlathini ahlukahlukene

Ngakho-ke, lapho kubhaliswa iphrojekthi 80XXX esizindeni se-TG, iskripthi sisebenzisa:

1. ukudalwa kwe-OU ehambisanayo (ama-oval avundlile abomvu) kulesi sizinda kanye nezizinda eziphambanayo, okungukuthi, lezo zizinda abasebenzi bazo okufanele bakwazi ukufinyelela kuzo le nsiza.

2. ukugcwalisa i-OU ngamaqembu anamagama afana ne--, lapho:

  • SRC_ domain – cross-domain abasebenzi bayo bazokwazi ukufinyelela izinsiza zesizinda se-DST
  • DST_domain - isizinda okufanele kunikezwe izinsiza zazo, empeleni, ukufinyelela okufanele kunikezwe, okungukuthi, ngenxa yalokho konke kwaqalwa.
  • — inombolo yephrojekthi
  • IZINDABA - amagama ezindima ezisohlwini lwe-matrix yokufinyelela.

3. ukufunda iqoqo lama-SID awo wonke amaqembu azo zonke izizinda ezithintekayo futhi siwalondolozele ukudluliselwa kwedatha okulandelayo kufayela elichaza amalungelo efolda ethile yephrojekthi ethile.

4. ukukhiqizwa kwamafayela omthombo (ipharamitha / buyisela) ngesethi yamalungelo okusetshenziswa insiza ye-iacKC kumodi yefayela elisebenzisekayo "icacKC "as-nasNNKCProjects" /buyisela C:TempKCKC40XXKC40XX.txt"

5. ukudala ifayela le-CMD elihlanganisa wonke ama-icacl athuliwe kuwo wonke amafolda ephrojekthi

Ukunikezwa okukhulu kwamalungelo kubasebenzisi besizinda abavela emahlathini ahlukahlukene

Njengoba kwakulotshiwe ngaphambili, ukwethula ifayela elisebenzisekayo kwenziwa ngesandla futhi ukuhlolwa kwemiphumela yokukhishwa nakho kwenziwa ngesandla.

Ubunzima obekumele sibhekane nabo ekugcineni:

  • uma ifolda yephrojekthi isivele igcwele inani elikhulu lamafayela, khona-ke ukusebenzisa umyalo we-icacls kumavolumu akhona kungathatha isikhathi eside, futhi kwezinye izimo kuholele ekuhlulekeni (isibonelo, lapho kunezindlela ezinde zefayela);
  • ngaphezu kwepharamitha / yokubuyisela, kwakudingeka sengeze imigqa ngepharamitha / sokusetha kabusha uma kwenzeka amafolda engazange adalwe, kodwa adluliselwe kumafolda akhona ngaphambili, anamalungelo efa asuka empandeni ekhutshaziwe;
  • Ingxenye yeskripthi sokudala amaqembu bekufanele isetshenziswe ku-dc engafanele yehlathi ngalinye, inkinga iphathelene nama-akhawunti okuphatha esihlahla ngasinye.

Isiphetho esivamile: kuyamangaza kakhulu ukuthi azikho izinsiza ezinomsebenzi ofanayo emakethe okwamanje. Kubonakala kungenzeka ukusebenzisa ukusebenza okufanayo ngokusekelwe kuphothali ye-Sharepoint.
Akuqondakali futhi ukuthi akwenzeki ukusebenzisa izinsiza ze-PoSH zokusetha amalungelo efolda kumadivayisi we-sinology.

Uma ngifisa, ngilungele ukwabelana ngombhalo ngokwakha iphrojekthi ethile ku-github uma kukhona onentshisekelo.

Source: www.habr.com

Engeza amazwana