recently, we set up an RStudio Server (Open Source version) to test if this would allow our analysts to work together more efficiently. While that appears to be true (and we're very happy so far), we've encountered unexpected behavior regarding file uploads and permissions/ACL.
Analysts share a development directory for collaboration, but files created via RStudio Server's upload feature do not have default ACLs as expected, 644 is set instead. All umasks are ignored.
Example: Directory shared_development
getfacl . # file: . # owner: root # group: root user::rwx group::rwx other::rwx default:user::rwx default:group::rwx default:mask::rwx default:other::rwx
- Create file with touch
touch test123 getfacl test123 # file: test123 # owner: testuser # group: testuser user::rw- group::rwx #effective:rw- mask::rw- other::rw-
- Upload file test456
getfacl test456 # file: test456 # owner: testuser # group: testuser user::rw- group::r-- other::r--
Where is our misconception?
How do we get the RStudio Desktop Server to use the ACL's of the directory shared_development?
- Any changes to umask of testuser had no effect.
- Changing umask mode of rstudio-server Daemon had no effect.
- Option server-set-umask in rserver.conf had no effect.