Safeguard Reference Manual (G06.24+, H06.03+ )

OBJECTTYPE Security Commands
Safeguard Reference Manual—520618-013
12-9
ALTER OBJECTTYPE Command
ALTER OBJECTTYPE Command
ALTER OBJECTTYPE changes one or more attribute values in an OBJECTTYPE
authorization record. The owner, the primary owner’s group manager, and the super ID
can change an OBJECTTYPE authorization record. In addition, any user ID that has
an ACL entry granting it O[WNER] authority can modify the OBJECTTYPE
authorization record.
Except for the ACCESS attribute, new object type attribute values specified in an
ALTER OBJECTTYPE command replace the existing attribute value. Specifying a new
ACCESS access-spec adds the new access-spec to the object type’s existing
ACL. To remove authorities previously granted to user IDs, use the minus-sign (-) form
of access-spec.
objecttype-list
specifies one or more object types whose existing objecttype-attribute
values are to be changed. All object types specified must already have Safeguard
authorization records (created with the ADD OBJECTTYPE command).
objecttype-list can be either:
objecttype-spec
( objecttype-spec [ , objecttype-spec ] ... )
objecttype-spec
can be the name of any class of objects, including OBJECTTYPE:
DEVICE
DISKFILE
OBJECTTYPE
PROCESS
SUBDEVICE
SUBPROCESS
SUBVOLUME
USER
VOLUME
LIKE objecttype-spec
changes the attribute values of objecttype-list to the same as the existing
attribute values for objecttype-spec. For the ACCESS attribute, LIKE only
adds ACL entries or adds authorities to existing entries. It does not replace or
delete ACL entries or authorities.
ALTER OBJECTTYPE objecttype-list [ , ]
{ LIKE objecttype-spec | objecttype-attribute }
[ , objecttype-attribute ] ...