Safeguard Reference Manual (G06.24+, H06.03+ )

OBJECTTYPE Security Commands
Safeguard Reference Manual—520618-013
12-4
ADD OBJECTTYPE Command
•
Examples of command usage
ADD OBJECTTYPE Command
ADD OBJECTTYPE creates a Safeguard authorization record for a class of objects.
After an OBJECTTYPE authorization record is created, every attempt to create an
authorization record for an object of that type is subject to Safeguard authorization
checks and, optionally, to Safeguard auditing. By default, only a member of the local
super-group can add an OBJECTTYPE authorization record for a class of objects.
You can use SET OBJECTTYPE to establish default attributes and then use ADD
OBJECTTYPE to name the object class to which the default attributes are to be
applied. You can also specify values for the OBJECTTYPE attributes in the ADD
OBJECTTYPE command. The current default values are used for any attributes not
specified.
objecttype-list
specifies one or more object types for which authorization records are to be added.
objecttype-list can be either:
objecttype-spec
( objecttype-spec [ , objecttype-spec ] ... )
objecttype-spec
can be any object class or type, including OBJECTTYPE:
DEVICE
DISKFILE
DISKFILE-PATTERN
OBJECTTYPE
PROCESS
SUBDEVICE
SUBPROCESS
SUBVOLUME
USER
VOLUME
LIKE objecttype-spec
adopts the existing OBJECTTYPE attribute values of objecttype-spec as the
attribute values to be used for the authorization record or records being added.
ADD OBJECTTYPE objecttype-list [ , ]
[ LIKE objecttype-spec | objecttype-attribute ]
[ , objecttype-attribute ] ...
Note. OBJECTTYPE USER also controls who can use the ADD ALIAS and ADD GROUP
commands.