Home > Storage > PowerScale (Isilon) > Product Documentation > Management and Migration > PowerScale OneFS Authentication, Identity Management, and Authorization > Viewing file permissions
You can check PowerScale OneFS file permissions from the PowerScale CLI. The following table shows the available extended ls commands:
Command | Applicable to filename or directory | Description |
ls –le <filename> | Filename | Displays the file permission state, ACLs, owner, and group information |
ls –len <filename> | Filename | Displays the file permission state, ACLs, owner, and group information numerically |
ls –led <directory> | Directory | Displays the directory permission state, ACLs, owner, and group information |
ls –lend <directory> | Directory | Displays the directory permission state, ACLs, owner, and group information numerically |
The following figure shows the output of ls –le for a POSIX file:
Figure 23. POSIX file ls –le example
In this example, the file permission state, ACLs, owner, and group information are displayed. The POSIX bits are used for access checks and can be returned to an NFS client correctly. The SMB clients view the synthetic ACL representation of those POSIX mode bits.
The following figure shows the output of ls –len for a POSIX file:
Figure 24. POSIX file ls –len example
In this example, with the file permission state of ls –len, ACLs, owner, and group information are displayed numerically. User yarn maps to UID 507 and group Hadoop maps to GID 500.
The following figure shows the output of ls –le for an ACL file:
Figure 25. ACL file ls –le example
In this example, an ACL file with ls –le is displayed, with a total of 2 DACLs associated. The + indicates that the file has a real ACL. This information is only viewable through the PowerScale CLI. The POSIX bits are only for representation and might seem more permissive than the actual permission. They are a OneFS best estimate of representing the ACLs in POSIX bits. Because the file has a real ACL, all access checks for all clients will be against the ACL.
The following figure shows the output of ls –len for an ACL file:
Figure 26. ACL file ls –len example
In this example, the same ACL file as in the previous example is displayed, now with ls –len. The user and group are translated to numeric values, and the DACLs show the actual SID values.