Thread: How do I set individual permissions for user accounts?

attn mods or admins: please move thread appropriate forums, couldn't figure out question belongs.

haven't installed since ubuntu 9.04, gave admin lot of control on permissions of each user account. i'm setting 12.04 friend linux-dumb , want able give him permission install software center, limit ability change in system. unfortunately, 12.04 seems allow choose between standard user , administrator...is there way change individual permissions account terminal (or package it)?

want let him do:
download , install games, apps, etc computer.
access printers , peripherals.
change settings in own desktop personalize it
shutdown box

don't want him able do:
change user permissions
create new user accounts
use terminal anything
access other users files
or basically, screw i've spent 3 days setting up...

suggestions?

setting user standard user achieve of except following:

use terminal

i don't see why problem, standard user can use terminal run commands affect files in home directory anyway. if can't use sudo can't mess up.

access other users files

set permissions on everyones home directories have access:

code:

sudo chmod 700 /home/*

download , install games, apps, etc computer.

you can change policykit settings any user can install software without needing password. please aware enable user remove software well. need edit file /usr/share/polkit-1/actions/org.debian.apt.policy , edit following line (highlighted in red).

code:

<action id="org.debian.apt.install-or-remove-packages">   <description gettext-domain="aptdaemon">install or remove packages</description>   <message gettext-domain="aptdaemon">to install or remove software, need authenticate.</message>   <defaults>     <allow_any>auth_admin</allow_any>     <allow_inactive>auth_admin</allow_inactive>     <allow_active>auth_admin_keep</allow_active>   </defaults> </action>

code:

<action id="org.debian.apt.install-or-remove-packages">   <description gettext-domain="aptdaemon">install or remove packages</description>   <message gettext-domain="aptdaemon">to install or remove software, need authenticate.</message>   <defaults>     <allow_any>auth_admin</allow_any>     <allow_inactive>auth_admin</allow_inactive>     <allow_active>yes</allow_active>   </defaults> </action>

Forum The Ubuntu Forum Community Ubuntu Official Flavours Support General Help [ubuntu] How do I set individual permissions for user accounts?

Ubuntu