OSF DCE Administration Guide--Core Components

Controlling Access to CDS Names
the following command:
dcecp> acl modify /.:/hosts/orion/cds-clerk -change {user michaels rw}
Keep in mind that clerks and servers are also represented by entries in the namespace.
To edit an ACL that is associated with the namespace entry for a CDS clerk or server,
you must include the -entry option, as well as the -change option, in the acl modify
command line. For detailed instructions on how to modify an ACL on the CDS entry for
a DCE resource, see Section 16.8.
16.7 Control Program Commands and Required Permissions
Table 16-2 lists all the dcecp commands that operate on CDS objects with the
permissions that a principal must have to execute the commands.
TABLE 16-2. DCE Control Program Commands and Required Permissions
_________________________________________________________________________
Commands Required Permissions
_________________________________________________________________________
_________________________________________________________________________
Read permission to the cell’s root directory whose
alias you want to list.
cdsalias catalog
_________________________________________________________________________
Administer permission to the root directory of the
child cell and insert permission to the root directory of
the parent directory.
cdsalias connect
_________________________________________________________________________
Administer permission to the cell root directory.cdsalias create
_________________________________________________________________________
Administer permission to the cell root directory.cdsalias delete
_________________________________________________________________________
Administer permission to the cell root directory. The
server principal requires insert permission to the parent
cell’s root directory when you want to establish a
hierarchial cell relationship (-child option).
cdsalias connect
_________________________________________________________________________
Insert permission to the parent directory where the
child pointer (-member option) is to be placed.
directory add
_________________________________________________________________________
For a new directory—Insert and read permissions to
the parent directory, and write permission to the
clearinghouse that stores the master replica of the new
directory. Also, the server principal needs read and
insert permissions to the parent directory of the new
directory.
directory create
_________________________________________________________________________
For a replica of an existing directory (the -replica
option)—Administer permission to the directory that
you intend to replicate, and write permission to the
clearinghouse (-clearinghouse option) that stores the
new replica. Also, the server principal needs read,
directory create (continued)
_________________________________________________________________________
124243 Tandem Computers Incorporated 16−7