Safeguard Reference Manual (G06.24+, H06.03+ )

OBJECTTYPE Security Commands
Safeguard Reference Manual—520618-013
12-7
ADD OBJECTTYPE Command
-
(minus-sign) operates on existing ACL entries. The minus-sign form of
access-spec modifies the current default ACL. The authority entries
are removed from the default ACL entries for the users specified with
user-list.
DENY
denies the user IDs or user groups specified by user-list the access
authorities specified by authority-list.
authority-list
specifies the access authorities to be granted (or denied) to user-list.
authority-list can be any one of:
authority
( authority [ , authority ] ... )
*
authority
is either:
C[REATE]
O[WNER]
*
(asterisk) specifies both CREATE and OWNER.
AUDIT-ACCESS-PASS [audit-spec]
changes the audit-spec for successful attempts to add an authorization record
for an object of this type. The form of audit-spec is:
{ ALL | LOCAL | REMOTE | NONE }
For a description of the audit-specs, see the SET OBJECTTYPE Command on
page 12-20. Omitting audit-spec specifies NONE.
AUDIT-ACCESS-FAIL [audit-spec]
changes the audit-spec for unsuccessful attempts to add an authorization
record for an object this type. The form of audit-spec is:
{ ALL | LOCAL | REMOTE | NONE }
Note. Specifying ACCESS access-spec with ADD OBJECTTYPE does not override the
current default ACL (established with SET OBJECTTYPE). Instead, any ACL entries specified
with ADD OBJECTTYPE modify the template of current default settings.