Re: User Who Modified File

[MidLifeXis]

It sounds (from the terms being used) like you are on a Windows system. If, however, you are on a unix system, you should be aware of a few things.

This only works (under unix) if the OS captures extended usage logs, or the edit method creates a new file. An append or a open+trunc+write does not change ownership of the file.

usera$ grep groupa /etc/group
groupa::1000:usera,userb

usera$ touch foo
usera$ chgrp groupa foo
usera$ sudo chown userb foo
usera$ ls -l foo
-rw-rw-r--  1 userb ... foo

usera$ echo Hello World > foo
usera$ ls -l foo
-rw-rw-r--  1 userb ... foo

That is not saying that it cannot be done, just that classical unix will not give the correct expected answers in all cases.

On a system with chown for non-superuser privileges, there are even more assumptions being made.