On all the serve remotes, it would be good to be able to control the permission levels of users based on the realm. I have remotes (specifically webdav in my use case but FTP itself could benefit) that i’d like to hand to a few people but the issue currently is they will have access to not only access the data but delete it. My proposal is the default is the normal read/write but based on a few flags and the realm in the passwd files we can control the methods allowed to be executed.
Something like (default is always ALL)
This could be simplified also to just read write instead of defining the actual methods like:
If we didn’t want to use realm to control this, then we could also just flag the users like this but this is a bit cumbersome as you’d have to marry those user names to the password file when rclone is started. Using the realm, it would become dynamic.
Without this, I’m currently forced to run multiple rclone instances on different ports specifying the ‘read-only’ flag is the remote itself and directing the different users to the different ports.