Guy's

we are in AIX 5.3

We have created two users user1 and user2 and they are under same group Staff Group

user1 will create file under /tmp/ and this is the permission of this file

-rw-r--r-- 1 user1 staff 1 Jun 13 09:47 file

user2 is under same group and when he try to change the permission of the same file he will get this message !

chmod 777 file
chmod: file: Operation not permitted.

I know the owner of the file is user1 but user1 and user2 are under same group so should have same permission

is there any clue to let the change of the permission be executed by user2 ?

Only the owner of a file and the user root (uid=0) are allowed to change the filemode of a file. It doesn't matter if you have write-access or not, execute-rights or not, etc..

If you have to change the filemode of a file owned by user1 via a command issued by user2 you might want to explore sudo and its possibilities.

Regarding your original question: works as designed.

I hope this helps.

bakunin

What about Umask option ?

I think this option will let the permission change of the file be allowed for everyone in the same group .

Do you have any idea about it and how it's work ?

Try...

cp file file.tmp &&\
mv file file.old &&\
mv file.tmp file &&\
rm file.old &&\
chmod 777 file

Ygor thank you for your trying

User1 is under staff group we need any one under staff group change the permission of any one in the same group without do copying , I think there is solution by Umask

Do you have any idea about Umask Option ?

"umask" will only change the filemode new files are being created with. I don't think there is a way without copying/modifying the file in Ygors way.

The alternative to copying would be to effectively become the user who owns the file, at least for the moment needed to change the filemode. This is what i had in mind when i suggested sudo. You could also use more extravagant (and surely far less reliable and less desirable) ways to achieve the same goal like suid-ed copies of shell executables and the like. I don't think these are of more than theoretical value.

I hope this helps.

bakunin

Why do you actually need to do? Would group-writeable permissions on the files and directories be sufficient?