Changing Access Permissions

Because Linux is a multiuser system, every file in a Linux file system belongs to a user and a group. All users, including the superuser, have their own home directories where private data, like documents, bookmarks, or e-mail, are stored. Write access to these home directories is strictly limited to the owner by default. As an owner of a file or directory, you can change the access permissions to your files. For example, you can protect files holding sensitive data against read access by other users and you can authorize other users to write, read, or execute several of your files where appropriate.

Traditionally, three permission sets are defined for each file object on a Linux system. These sets include the read (r), write (w), and execute (x) permissions for each of three types of users—the file owner, the group, and other users. Instead of using the “traditional” way to change access permissions in a shell, you can also use the graphical user interface Konqueror provides.

To set permissions for a file, choose from the following options in Konqueror:

Forbidden

Users can see the filename in the file system but cannot open the file and read it.

Can Read

Users can open and read the file but cannot change it.

Can Read & Write

Users can open, read, and change the file.

To set permissions for a folder, the following options are available in Konqueror:

Forbidden

Users can see the folder name in the file system but cannot open the folder.

Can View Content

Users can see the folder contents.

Can View & Modify Content

Users can see the folder contents and create new files or subfolders.

To change access permissions:

  1. Open Konqueror and select the file or folder for which to change access permissions.

  2. Right-click the file and select Properties. A new dialog opens.

  3. Click the Permissions tab. It shows the ownership of the file or folder in the lower part. The upper part shows the current access permissions.

  4. From the lists for Owner, Group, and Others, select the permissions to set for the file or folder.

  5. Click OK to apply the changes.

Apart from this traditional permission concept for file system objects, you can also use access control lists (ACLs) with Konqueror. With ACLs, permissions can be defined more flexibly than the traditional permission concept allows. They allow assigning permissions to individual users or groups even if these do not correspond to the original owner or the owning group. For more in-depth information about ACLs, refer to Kapitel Zugriffssteuerungslisten unter Linux (↑Referenz).

To grant certain users or groups access permission to a file or folder, proceed as follows:

  1. Open Konqueror and select the file or folder for which to change access permissions.

  2. Open the Properties dialog for the file or folder and click the Permissions tab.

  3. Click Advanced Permissions. The following dialog shows the current permissions for the object.

  4. Click Add Entry.

  5. To grant a certain user access permission to the file or folder, select Named User and select a user from the list.

    To grant a certain group access permission to the file or folder, select Named Group and select a group from the list.

  6. In the Advanced Permissions dialog, the added user or group appears in the list showing the current permissions. The green check marks in the columns r, w, and x indicate that the user has read, write, and execute access to the file or folder.

  7. You can modify the access rights for the user by clicking the corresponding check marks for this user in the column r, w, or x.

  8. When all access permissions are set according to your wishes, click OK to close the dialog.

  9. Click OK to apply your changes and to close the Properties dialog.