Learn how to maintain backwards-compatible access permissions

On previous versions of the Data Archive server you could set permissions only for one owner, one group, and for world access (everyone else). If you plan to continue using an old-model security configuration, then you should continue to use the owner/group/world paradigm. This is to maintain backwards-compatibility with older client tools, which cannot interpret the new access permissions. For this to work, each PI resource must have assigned permissions for:

• One (and only one) PI user

• One (and only one) PI group

• PIWorld identity

If any of these conditions is not met, then the Data Archive server cannot determine an owner and group. It will use the PIUserIncompatible and PIGroupIncompatible identities for the owner and group. Older versions of client tools will try to display an owner and group even when connected to new-model servers. If the access permissions are incompatible, then these tools will display the PIUserIncompatible and PIGroupIncompatible identity names.