OSF DCE Administration Guide--Core Components

Accessing Registry Objects
Parent Directory
d permission
principal, group, or
organization
D permission
To delete principals, groups, or organizations, you must have the following permissions:
• The d permission on the directory in which the principal to be deleted exists
• The rD permission on the principal, group, or organization to be deleted
For example, to delete the principal preludes/villa/lobos, you must have the d
permission for the preludes/villa directory, and rD permissions for the principal
preludes/villa/lobos.
41.2.4 Permissions Required to Add Accounts
When you add accounts, dcecp or the rgy_edit command add the principal to the group
or organization that is named in the account, if the principal is not already a member of
the group and/or organization. For this reason, the permissions that are required to add
an account may include the permissions that are required to add a member to a group or
organization. The following topics are covered in the discussion of the permissions
required to add accounts:
• The permissions that are required to add an account and at the same time add the
principal as a member of the group and organization that is named in the account.
(See Section 41.2.4.1.)
• The permissions that are required to add an account for which the principal is already
a member of the named group and organization. (See Section 41.2.4.2.)
• The permissions that are required to add an account and add the principal only to the
group that is named in the account (because the principal is already a member of the
organization). (See Section 41.2.4.3.)
• The permissions that are required to add an account and add the principal only to the
organization that is named in the account (because the principal is already a member
of the group). (See Section 41.2.4.4.)
124243 Tandem Computers Incorporated 41−7