{
#------------------------------------------------------------
# FILE ACCESS PERMISSIONS RULES
# 
# - There are three types of user that can connect to the ftp
#   server: regular users, "admin", and information bay users.
# 
# - When "information bay" users connect, their permissions are
#   set by the Anonymous sections below.
# 
# - All other users are governed by the permissions declared in
#   this main section of the proftpd.conf file.
# 
# - The main section permits access only from the local network.
#   Hence, only the anonymous information bays can be accessed
#   remotely.
# 
# - Regular users as well as the "admin" account can connect
#   locally, and the ftp server will switch to their user/group
#   immediately upon connection. Therefore we program the FTP
#   server to permit write access to all these users; the Unix
#   filesystem will sort out who gets to update which files.
# 
# - All Unix accounts have the same primary group name as user
#   name (normal for Red Hat Linux). However, all user accounts
#   also belong to group "shared".
# 
# - Files in user accounts are owned by "user/user" (i.e. group
#   name same as user).
# 
# - For all the other files (primary web site, information bay
#   files, etc.) either they can only be written by "admin" or
#   they can be written by any local user. If the former, we 
#   make the files owned by "admin/shared", with permissions
#   750/640. If the latter, we make the files owned by
#   ???/shared, with permissions 770/660. Each file is owned
#   by the user that created it.
# 
# - Make all directories setgid, so that they continue to be
#   owned by "shared".
#------------------------------------------------------------
}
