Safeguard Reference Manual (G06.24+, H06.03+ )

Security Group Commands
Safeguard Reference Manual—520618-013
13-17
INFO SECURITY-GROUP Command
group-num, member-num identifies a single local user.
group-num,* identifies all the local users in the group that has group-num.
*,* identifies all the local users.
\node-spec.group-num, member-num identifies both the local user with user
ID group-num, member-num and a network user with the same user name
and user ID as that local user.
\node-spec.group-num,* identifies all the local users in the group identified
by group-num and all network users whose group-num and group-name
match those of the local group.
\node-spec.*,* identifies all local users as all network users with access to the
local node.
authority-list for this object type can contain either of these codes:
E - EXECUTE authority
O - OWNER authority
NO ACCESS CONTROL LIST DEFINED!
appears for a security group that has no ACL. Use ALTER SECURITY-GROUP . . .
ACCESS to define ACL entries for an existing security group authorization record.
INFO SECURITY-GROUP Detailed Report
The detailed INFO SECURITY-GROUP report includes the auditing specifications
currently defined for the security group. Figure 13-2 shows the format of the detailed
INFO SECURITY-GROUP report.
Caution. If you do not specify an ACL for a security group, only the local super ID can execute
commands restricted to that security group.
Figure 13-2. INFO SECURITY-GROUP Detailed Report Format
LAST-MODIFIED OWNER STATUS
sec-group
date, time owner-id status
user-spec [DENY] authority-list
user-spec [DENY] authority-list
.
.
[ NO ACCESS CONTROL LIST DEFINED! ]
AUDIT-ACCESS-PASS = a-spec AUDIT-MANAGE-PASS = a-spec
AUDIT-ACCESS-FAIL = a-spec AUDIT-MANAGE-FAIL = a-spec