----- "Scott Silva" <ssilva at sgvwater.com> wrote: > on 2-19-2009 1:31 PM Tim Nelson spake the following: > > ----- "MHR" <mhullrich at gmail.com> wrote: > >> On Thu, Feb 19, 2009 at 12:15 PM, nate > <centos-T6AQWPvKiI1cRAk/VAjCeQ at public.gmane.org> > >> wrote: > >>> Tim Nelson wrote: > >>> > >>>> I've been around and around on this topic and I'm just hoping > >> someone can > >>>> give me a little sanity by confirming 'yay or nay' whether this > is > >> possible > >>>> or not. > >>> It may be possible to prevent them from deleting a file, but if > >> they > >>> have write access it wouldn't be possible from effectively > deleting > >>> the file by wiping it's contents(truncating it). > >>> > >> However, file creation and deletion are functions of the directory > >> permissions where the file resides. If a directory allows a user > to > >> write to it, they can create and delete files in that directory > with > >> reckless abandon. > >> > >> There are probably some intricate ways around this particular > >> problem, > >> but they can get pretty complicated really fast. > >> > >> HTH. > >> > >> mhr > > > > I've been trying to devise a way around this problem and as you > mentioned, it gets extremely complicated quickly. It's even more > complicated than allowing users to delete files and restoring the file > from a backup set. Well, at least I don't feel I'm going insane > anymore (for now...). > > > > Thank you to all who responded. > > > > --Tim > I have enabled the recycle bin vfs object on my systems. That way a > user has > to really try and delete a file to make it go away. Like windows, they > would > have to delete it, go look in the recycle bin (that you can hide) and > delete > it again. > It has saved me many hours of recovering stuff. Ooooooo! This may indeed be a partial solution. 'Administrators' could have access to the Recycle Bin to restore deleted items where 'users' would not have access. Interesting... --Tim