Safeguard Reference Manual (G06.24+, H06.03+ )

OBJECTTYPE Security Commands
Safeguard Reference Manual—520618-013
12-3
Syntax of OBJECTTYPE Security Commands
Syntax of OBJECTTYPE Security Commands
The remainder of this section describes each OBJECTTYPE security command in
detail. Commands are presented in alphabetical order, and descriptions contain these
elements:
•
A summary of the command’s function, including the restrictions on who can use
the command
•
The command syntax, including descriptions of the command parameters and
variables
•
The format for any command listing or report
•
Considerations for the use of the command
Table 12-2. OBJECTTYPE Security Command Summary
Command Description
ADD
OBJECTTYPE
Adds an OBJECTTYPE authorization record with the specified
OBJECTTYPE attribute values. If you do not specify attribute values, the
current default is used. By default, only a member of the local super group
can add an authorization record for an object type.
ALTER
OBJECTTYPE
Changes one or more attribute values in an OBJECTTYPE authorization
record. For all attributes except ACCESS, ALTER OBJECTTYPE
replaces the current value with the specified value. For the ACCESS
attribute, ALTER OBJECTTYPE changes the existing ACL to incorporate
access-spec.
DELETE
OBJECTTYPE
Deletes an OBJECTTYPE authorization record. Afterward, requests to
create an authorization record for any object of the specified object type
are subject to the rules described in Table 12-1.
FREEZE
OBJECTTYPE
Temporarily disables authorities granted to users who have
OBJECTTYPE access. When an OBJECTTYPE is frozen, only the
primary owner, the primary owner’s group manager, owners on the ACL,
and the local super ID can create authorization records for that type of
object.
INFO
OBJECTTYPE
Displays the existing attribute values in an OBJECTTYPE authorization
record.
RESET
OBJECTTYPE
Sets default OBJECTTYPE attribute values to the predefined values of
the SET command.
SET
OBJECTTYPE
Sets OBJECTTYPE attribute values to specified default values.
SHOW
OBJECTTYPE
Displays the current default values of the OBJECTTYPE attributes.
THAW
OBJECTTYPE
Reenables a frozen OBJECTTYPE. Then user IDs with appropriate
entries on the OBJECTTYPE ACL can create authorization records once
again.