OSF DCE Administration Guide--Core Components

Using Access Control Lists
Container
Object ACL
Object ACL
Initial Container
ACL
Initial Object
ACL
A
Object Created
in Container A
An object created
in Container A
receives
Container A ’
s
Initial Object ACL
as its Object
ACL.
28.6.2.2 Default ACLs for Containers
When a container is created within a container (a subdirectory within a directory, for
example), it inherits the parent container’s
• Initial Container ACL as its Object ACL and as its Initial Container ACL
• Initial Object ACL as its Initial Object ACL
For example, if you create a file named report in the directory marketing, the system
assigns report the Initial Object ACL of the directory marketing. If you create a
subdirectory in marketing, the system assigns the new subdirectory the Initial
Container ACL of marketing. New subdirectories also receive a set of initial ACLs that
match the parent directory’s initial ACLs. In this example, the new subdirectory also
receives marketing’s initial ACLs as its own ACLs. Figure 28-5 illustrates how the
default ACLs are assigned to objects created in containers.
Figure 28-5. Initial ACLs for Containers Created in Containers
124243 Tandem Computers Incorporated 28− 19