OSF DCE Application Development Guide--Core Components

The Access Control List APIs

The following two examples illustrate the general structure of the

dce_acl_resolve_by_uuid( ) API and dce_acl_resolve_by_name( ) API that are

supplied in the ACL library. They may be used as paradigms for creating additional

resolver routines.

The ﬁrst example shows dce_acl_resolve_by_name( ).

A server has several objects and stores each in a backing store database. Part of the

standard header for each object is a structure that contains the UUID of the ACL for that

object. (The standard header is not intended to be an abstract type, but rather a common

prolog provided to ease server development.) The resolution routine for this server

retrieves the object UUID from the handle, uses that as an index into its own backing

store, and uses the sec_acl_type parameter to retrieve the appropriate ACL UUID from

the standard data header.

This routine needs the database handle for the server’s object storage, which is speciﬁed

as the resolver_arg parameter in the dce_acl_register_object_type( ) call.

124245 Tandem Computers Incorporated 31− 11