We are getting more and more outside developers (from different clients) and are beginning to need a better strategy than adhoc adding to our server and adding to them ourcompany group (which owns everything in /var/www/ - our workspace)
And optimal solution would be to able to nest groups, so if I could @ourcompany would be all members the group @ourcompany.
But that's not possible. I am toying with the idea of having a template system, where i do some simple sed stuff to get substitute and create a new /etc/group
(The reason I don't want guestcompany:xxx:guest1,guest2,john,joe,bob is because if we add or remove people from our company than someone will have to go through and make sure everything is updated, which probably could fall off the edge)
I guess the next logical step is ACLs but from my past experience is that they're somewhat a hassle to deal with, so I just wanted to see if any of you knew any other solutions that would work.