Guardian Procedure Calls Reference Manual (G06.25+)

Guardian Procedure Calls (O)
Guardian Procedure Calls Reference Manual—522629-013
11-22
OPEN Procedure (Superseded by FILE_OPEN_
Procedure )
For a given access mode, the accessor’s security level is checked against the file
security level. File access is allowed or not allowed as shown in Table 11-4
. In this
table, file security levels are indicated by FUP security codes. For a given
accessor security level, a Y indicates that access is allowed to a file with the
security level shown; a hyphen indicates that access is not allowed.
If the caller to FILE_OPEN_ fails the security check, the open fails with an error 48.
A file’s security can be obtained by a call to FILE_GETINFOLIST[BYNAME]_,
FILEINFO, or by the File Utility Program (FUP) INFO command.
If you are using the Safeguard product, this security information might not apply.
•
Tape file open—access mode
Table 11-3. Levels of Security
FUP Code
Program
Values Access
– 7 Local super ID only
U 6 Owner (local or remote), that is, any user with owner’s
ID
C 5 Member of owner’s group (local or remote), that is,
any member of owner’s community
N 4 Any user (local or remote)
O 2 Owner only (local)
G 1 Member of owner’s group (local)
A 0 Any user (local)
Table 11-4. Allowed File Accesses
Accessor’s Security Level File Security Level
– U C N O G A
Super ID user, local access
Super ID user, remote access
Y
–
Y Y Y
Y Y Y
Y Y Y
–
– –
Owner or owner’s group manager, remote
access
Member of owner’s group, remote access
Any other user, remote access
–
–
–
Y Y Y
–
Y Y
–
– Y
–
– –
–
– –
–
– –
Owner or owner’s group manager, local
access
Member of owner’s group, local access
Any other user, local access
–
–
–
Y Y Y
–
Y Y
–
– Y
Y Y Y
–
Y Y
–
– Y