Technical data

Using Files and Directories
10.5 Protecting Files
Type of Protection For More Information
UIC-based protection codes Chapter 12
Access control lists (ACLs) Chapter 12
ISO 9660-formatted media protection Section 9.4.2
ANSI-standard accessibility protection (magnetic tape only) Section 9.4.2
For the most part, file protection is transparent. Tools exist, however, to adjust
the protection of a file. You can set the protection or modify the ACL of a file if at
least one of these statements is true:
You own the file.
You have control access to the file.
You have SYSPRV privilege.
The group part of your UIC is less than or equal to MAXSYSGROUP.
You have GRPPRV and you have the same group UIC as the file.
10.5.2 Displaying File Ownership and Protection
You can display ownership and protection information with the commands and
qualifiers shown in Table 10–1.
Table 101 DCL Commands to Display Ownership and Protection
Command Use to Display
DIRECTORY/ACL filespec ACL of file
DIRECTORY/OWNER_UIC filespec UIC of owner of file
DIRECTORY/PROTECTION filespec UIC-based protection of file
DIRECTORY/SECURITY All of the above
DIRECTORY/FULL filespec All of the above and other, nonsecurity
information
SHOW DEVICES/FULL device-name Device UIC and protection
SHOW PROCESS Process UIC
SHOW PROTECTION Default file protection
SHOW SECURITY All of the above
Directory structures do not apply to tape volumes. However, you can use the
DIRECTORY command to search for files on tape volumes. Section 10.7 describes
how to access tape files for read and write operations and also explains the use of
the DIRECTORY command for tapes.
The DCL command SHOW PROTECTION displays the current process default
protection. This protection is applied to files created during your terminal session
or to batch jobs, where defaults from directories or previously existing versions
are not available.
Note
To use the SHOW PROTECTION command to display the default
protection of magnetic tapes, you must specify the /PROTECTION
qualifier with the INITIALIZE command when you initialize the magnetic
tape volume. Otherwise, the protection is not written to the magnetic
1014 Using Files and Directories