# 
# 
# patch "Makefile"
#  from [9a2ffce8aaa8a1c927d5f18eedc448b0cbaf6c6b]
#    to [9c48f94834d6a0eef73c4c6d3bb396852675bd89]
# 
# patch "README"
#  from [af03b1a21ca96add94672174b6e6e25ae16e4af2]
#    to [3cff6832c62428446865879c54726de33c770189]
# 
============================================================
--- Makefile	9a2ffce8aaa8a1c927d5f18eedc448b0cbaf6c6b
+++ Makefile	9c48f94834d6a0eef73c4c6d3bb396852675bd89
@@ -6,3 +6,19 @@
 
 usher: usher.cc
 	g++ usher.cc -o usher -g -Wall `pkg-config libpqxx --cflags --libs`
+
+acl:
+	@if ! [ "$(user)" = "" ]; then \
+	setfacl -m $(user):rwx sessions/ projects/ www/projects/ graphs/ ; \
+	echo "setfacl -m $(user):rwx sessions/ projects/ www/projects/ graphs/" ; \
+	else \
+	echo "You need to set user=www-data (or your webserver user)" ; \
+	fi
+
+owner:
+	@if ! [ "$(user)" = "" ]; then \
+	chown $(user) www/project.php www/admin.php www/viewmtn/; \
+	echo "chown $(user) www/project.php www/admin.php www/viewmtn/" ; \
+	else \
+	echo "You need to set user=www-data (or your webserver user)" ; \
+	fi
============================================================
--- README	af03b1a21ca96add94672174b6e6e25ae16e4af2
+++ README	3cff6832c62428446865879c54726de33c770189
@@ -1,8 +1,14 @@
 make symlinks
 	Set up a couple of symlinks
 make usher
 	Modified usher that uses the project database for a server list,
 	and uses the same config file as the web interface.
+make acl user=www-data
+	Give the www-data user (or replace this with whichever user the
+	webserver is) rwx permissions to the directories it stores data in.
+make owner user=www-data
+	Give the www-data user ownership of some files in www/ that it needs
+	to be able to symlink to.
 createdb <dbname>
 psql -f schema.sql <dbname>
 	setup database, if not done as the webserver user, that user will need
@@ -20,7 +26,7 @@
 projects/*/	Project-specific (internal)
 www/projects/*/	Project-specific (web-available)
 graphs/		viewmtn graph cache
-		These three need to be +rw for the webserver.
+		These four need to be +rw for the webserver.
 		Also, the webserver needs to be able to symlink from
 		www/projects/ to www/{project.php,admin.php,viewmtn/}.
 		This probably means that those have to be owned by the