active directory users in TCL?

[kukelyk]

hi!
i need a program, which creates a directory structure, in a folder.
the user tells a number and a string, and the script creates a folder, for example 1234.abcdef.
then the script make some folders into this, for example creates From, and in_out etc directories.
the different subfolders have to have restrictions, what i can do wint cacls (

http://www.computerhope.com/cacls.htm),

or setacl (setacl.sourceforge.net).
these programs need some switches..how can i call them from TCL?
or can i set permissions directly from TCL?
thanks in advance.

 

[Bong]

I'm not sure what restrictions you want to apply but have a look at file attributes

file attributes name
file attributes name ?option?
file attributes name ?option value option value...?
This subcommand returns or sets platform specific values associated with a file. The first form returns a list of the platform specific flags and their values. The second form returns the value for the specific option. The third form sets one or more of the values. The values are as follows:
On Unix, -group gets or sets the group name for the file. A group id can be given to the command, but it returns a group name. -owner gets or sets the user name of the owner of the file. The command returns the owner name, but the numerical id can be passed when setting the owner. -permissions sets or retrieves the octal code that chmod(1) uses. This command does also has limited support for setting using the symbolic attributes for chmod(1), of the form [ugo]?[[+-=][rwxst],[...]], where multiple symbolic attributes can be separated by commas (example: u+s,go-rw add sticky bit for user, remove read and write permissions for group and other). A simplified ls style string, of the form rwxrwxrwx (must be 9 characters), is also supported (example: rwxr-xr-t is equivalent to 01755).

On Windows, -archive gives the value or sets or clears the archive attribute of the file. -hidden gives the value or sets or clears the hidden attribute of the file. -longname will expand each path element to its long version. This attribute cannot be set. -readonly gives the value or sets or clears the readonly attribute of the file. -shortname gives a string where every path element is replaced with its short (8.3) version of the name. This attribute cannot be set. -system gives or sets or clears the value of the system attribute of the file.

On Macintosh, -creator gives or sets the Finder creator type of the file. -hidden gives or sets or clears the hidden attribute of the file. -readonly gives or sets or clears the readonly attribute of the file. Note that directories can only be locked if File Sharing is turned on. -type gives or sets the Finder file type for the file.

_________________
Bob Rashkin

 

[kukelyk]

I want to set user rights on directories (in windows).
for example:
admin have full access,
general users have rights for listing the directory
some users also have full access to the directory

The user info come from the Active directory of the domain controller...