Welcome back.

So in today's video, I'm going to give you an introduction to permissions in the world of Lennox.

Hold on, hold on Breathing and Maria breathing.

Breathe out.

I know, I know a lot of people would start getting things like permissions and Lennox.

They start hyperventilating because they know how in the same Microsoft active directory permissions could be.

And they're thinking, Oh, my golly, I just finally figured out Microsoft's permissions.

Now I have to figure out Lennox Well, here's a thing do realize, at least in a base Lennox over a base Lennox installation permissions within the Lenox world are just so much simpler than the Windows world, the Windows world.

At this point, you'd probably have to have a whole freakin book used to know all the permissions, right?

Sharing permissions and local permissions and all kinds of permissions going on Now we have to realize in Lenox World is it is that is not the case.

Permissions in the Lenox world are incredibly simple, possibly too simple you could argue.

Possibly two simple.

These with a base insulation, but they are incredibly simple.

So, really, In the Lenox world, you only have three actual permissions in a base insulation.

You have the ability to read.

So read means that you can read a file or folder.

Uh, right means you are able to write to a file folder.

So basically, it means you're able to modify it or edit it, that you do have to be careful the Lenox world, because this is one of those places where you go like Well, hey, Lennox, folks, you didn't have to go Quite insane.

Is Microsoft all those permissions?

But it could have added a couple more, because when you have the right permission that it gives you the ability to write to a file and rename a file and delete a file or folder, eh?

So one of the problems you run into the right permission is that's one of those permissions.

It can give a little bit too much power people on.

Then finally, you have the execute permission and simply the execute permission is that if it is a script or inexcusable that it allows you to actually run that you have read right and execute.

And those are the only permissions you have passed that you're then able to set those permissions for three different groups.

The first group, whenever you're looking at permissions, is the first group will be the actual user account that is the owner of the file or folder eso in the demonstration that I'll show you today, Bob Bob is the user account that you've been using.

So Bob has particular permission to a file or four.

That's the first thing that you see.

It's a read right execute, I read, write whatever else the first set.

That is for the user's account that his owner of the file folder, the next set of Reed right execute.

That is for the group owner of the Filer folder.

So you can put user accounts into a group, and then you can set a group owner for that file or four eso.

Let's say Bob has read right, execute permission on a file a voter, and then you can have Bob's grew another group Bob is in.

They might have the reed, right?

Are you know, whatever permission to the Final Four so you can actually have a different set of permissions for members of a group that are owner for that file folder, and then finally in the last group that that we talk about is the everyone group.

So you have the user account, the group owner account and then literally everybody else.

So any other user account or user that was able to access the file folder no matter where they are, whether they're sitting at the command line at the system or whether they're, you know, on the other side of the universe, as long as they get to that file folder through the network, somehow that is the final permission, and that is whatever permissions they are allowed.

So one of things that you'll see a lot, especially in the Web world, is you may have a user account.

The user account has a read right execute permission for a file or folder, the group account.

They'll have whatever permissions they have on Finally, the everyone, everybody else, the world will simply have a read access.

So you have Web pages, you have images, you have that type of stuff they will be able to read.

They will be able to see that information, but they won't be able to do anything else.

So those are the three permissions that you have in the three groups that you'll be dealing with.

Now, when you hear that, you might be thinking.

Okay, well, where did the numbers come from?

I've heard of 777751756 What are those numbers?

Right.

So when you look at those numbers, basically what those numbers being is, those are new miracle representations of Reed, right?

Execute.

And they're in the same order.

So the 1st 7 of the first number is for the user account.

That's the owner of the file folder.

The second number, the 2nd 7 or whatever else it is, is the permissions for the group owner.

And the final number is the permissions for everybody else.

When you're looking at the numbers, basically what you have is one the number one that stands for execute the ability to execute.

What's that?

Whatever is in the filer Fuller, Are you able to run?

Executed two is right.

So again, we talked about right.

We're talking about actually writing to a file folder or we're talking about renaming it or deleting it.

And then finally, four is read and read means you're able to read, and then all you do in order to get that 777 is you basically added up.

So if you want to give people read Rite permission to a file folder, it will be to Farid for for right, so that will be six.

So that's a permission.

If you want to give people simply, you read ability for a file folder that would simply before, if you want somebody for some reason, have the reed and execute.

Reed is four.

Execute is one, so therefore you get five.

And so that's basically how the numbering system work.

It's works, and it's relatively simple, so that let's go over to the computer so I can give you a bit of a demonstration to show you kind of how this looks in the real world On again and again, to be clear, clear it's a sample is a symbol is not the Windows world.

The Windows world's great I Love active directory, but wow, that crack can get complicated.

And Lennox World, this is much, much, much more simple and the main reason people get tripped up is because they in their mind, they're thinking that's more complicated than it actually is.

So let's go over to the computer and I'll show you how this works.

So here we are.

My computer, I just buy has created this little keynote slide again just to give you a visual.

Sometimes you feel like visual representations.

Again.

One equals, execute two equals, right for equals.

Reid s when you're actually sitting there at a Lennox consul and you're looking at what the end result will be if you have zero, What that will mean is basically, there is no permission there.

Whatever group or user you're talking about, we'll have no permission.

If it is one, they'll have the execute permission.

The ex permission.

If it's too, they'll have the right permission because he slashed hyphen w hyphen.

If it's three, they'll have hyphen right and execute permission.

If it's four, it'll equal read hyphen, hyphen.

So you only have the reed permission?

Uh, it's five.

It'll equal Read hyphen ex.

So you have to read and execute permission.

If it's six, it'll be read.

Write hyphens who have read Rite permission and seven is read, write or execute.

Basically, we're talking about full control.

And so what you'll do is you'll see these numbers and again you'll see like seven, 77 or 750 And so those will be an order, user account, group owner account, and then everyone else we go over here, we just take a look at this other slide again just to reiterate this.

So the first number is owner, or the first letter is owner.

The file folder, the second his group.

Everyone else So 777 equals.

Everyone in the world has full control.

The owner has full control, The group has full control, and literally everybody in the world has full control.

That's that's not a good idea.

Generally, you don't do 77 It is the big player.

Just to be clear, I'm not one of those hyper fanatical security people.

But this is something that you just don't do past that.

Like we have 700 What this means is the owner of the file folder has full control group owner and everybody else can literally do nothing.

So that's 700 We go over, take a look at 764 Owner has full control.

The group owner.

Some members of the group that own the final folder can read and write again.

Remember, with Reed, right, that means not only reading writing to it, but it also means being deleted and rename it on.

Then finally, everybody can read.

So with the four, that means everybody can read.

And that's that's general, a kind of sort of how it will be set up for me permissions if you're doing something like a Web server, so with that, let's go over to the actual server itself.

You kind of take a look at this.

And if you're looking to command line, that's what have my little bun to server running.

We're gonna log into it, Bob.

123456 We log in.

Here we are.

So we do P W d again.

This shows us what folder were end.

So we're in the bottom folder in the home directory, and from there you l s space hyphen.

L So list basically list the contents of the folder with some additional information, and then I will hit Enter.

And here we can see that I have Ah, couple.

Three different files on I have one folder and then I have different permissions and different owners.

So this is where you're gonna be looking at if you use something like the L s hyphen out space hyphen.

L command s so when we're looking here.

So over here, this is the permissions.

So we see Reed, right?

Nothing.

Read, Write nothing.

Read Nothing.

Nothing.

So the first group here is the owner of the account owner.

The second group is the group owner, and the final is the everyone s O.

We read.

Write nothing.

Read, write nothing.

Read nothing.

Nothing.

Then over here, if you see the d the D stands for directory.

So we know that's a directory, not simply a file.

Then we see Reed, right?

Execute.

So the user account that owns this file folder this is a folder has read, Right?

Execute the group Owner has read.

Right.

Execute on then.

Everybody else has read and execute permission.

We go down here, we'll see the files.

10 file and 10 file too.

Tim, the owner wth e file folder has a read right.

Execute three group has read Execute and then everybody else would have reason.

Just set this up so you could see simply has the execute permission.

Read, right.

Execute, read, execute and simply read permission.

So that's the first part that you're seeing over here.

And these are the permission that you probably sitting there going.

Wow, you are one hour.

You just thought about the numbers.

What about all those numbers?

The numbers really come in when you use something called the change Mob Command the C H M o d command.

And that's where you will change permissions.

And basically, those numbers correspond to how you'll be changing permissions.

And so those numbers will come up in other places.

It was one of those things where, when I'm just using l s hyphen l, we get the nice R w X, and so that's pretty easy to read.

But there's other places in Lennox where you'll have to actually use those numbers, and we'll talk about that in a different video s.

That's what you got over here.

So these are the permission then passed that when you're looking at a less hyphen al this First, this first line here in this first column eh?

So these are the user accounts or these air the accounts that own these particular files or folders.

So Bob owns test file.

The actual account owns test file Bob Rhodes Test folder.

Tim owns Tim file and Bob O's Tim File.

Eso basically Bob here has read Rite permission of test file.

Bob here has read.

Right, Execute permission for test folder.

Tim has read.

Right.

Execute permission for Kim file and Bob has read, Right.

Execute for 10 file.

So this is the user account that has ownership of the file folder the second here, this is the group.

This is a group that has ownership of the file folder.

And so then we go to the second set of permission.

So here, whenever you create a user account, actually creates a group for you.

So there's a bob user, a bob Group s o the Bob Group that has the reed, right.

Permission for the test file.

Bob Group has read right?

Execute for test folder, the test group.

So I created a test group.

So anybody who's a member of the test group on Lee has the Reed execute permission for Tim file and anybody part of the test group again has the read execute permission for the 10 file, too.

And then, finally, you have the everybody else in the world everybody else in the world is able to read.

The test file is able to read Execute Test Folder is able to execute Temp file on is able to a read Tim file, too.

So that's a basic understanding of how these permissions actually look on how they work at the actual command line again.

It is a lot simpler than people people give it credit for, and they get very frustrated because again they think it's the Microsoft world, and so they think it's a lot more complicated than it actually is.

So that's a basic overview of permissions in the Lenox world Again is a lot simpler than people give it credit for.

You have the user account that's the owner of the file folder.

You have the group account that's an owner of filer folder, and then you have everybody else.

Those were the only three things only three groups you have to worry about.

And then, as faras permissions are concerned, you have read, you have right and you have execute read is pretty obvious.

It's obvious on the face of it, execute again allows you to execute right is the only one again.

Were you thinking Lennox World kind of thing?

You know, maybe if you spent a little bit more time and created a couple of more permissions, that might have not been a bad idea, because again, right, basically right gives you the ability to write.

And it also gives you the building to rename, and it also gives you building Jubilee.

So really, really think hard about whether you give the right permission.