Safeguard Administrator's Manual (G06.29+, H06.08+, J06.03+)

Contents

Safeguard Administrator’s Manual—523317-029

3. Managing User Groups

Freezing a User's Ability to Access the System 2-24

Specifying Auditing for a User ID 2-25

Deleting Users 2-26

Deleting Administrative Groups 2-26

Using SAFECOM to Establish a Network of Users 2-27

Using Safeguard With Nodes With Standard Security 2-27

Identifying Network Users 2-28

Granting a Network User Access to Objects on Your System 2-29

Establishing a Community of Network Users 2-30

Changes to the PAID During a User Session 2-33

Additional Considerations for Aliases and Groups 2-33

Additional Considerations for ACCESS with Network Specific Subject IDs 2-33

Establishing Default Protection for a User's Disk Files 2-34

Establishing a Default Access Control List 2-35

Establishing Default Ownership 2-36

Specifying Default Audit Attributes 2-36

Eliminating Default Protection for a User 2-37

Specifying a Default Command Interpreter for a User 2-37

Establishing Guardian Defaults 2-38

Setting the File-Security String 2-38

Specifying the Default Volume and Subvolume 2-39

Assigning an Alias to a User 2-40

3. Managing User Groups

Adding User Groups 3-2

Adding and Deleting Group Members

3-3

Using Wild-cards for Managing Group Members

3-4

Transferring Group Ownership

3-5

Deleting Groups 3-6

4. Securing Volumes and Devices

General Procedure for Securing Volumes and Devices 4-2

Considerations for Volumes

4-3

Considerations for Devices and Subdevices 4-4

5. OBJECTTYPE Control

Controlling an Entire Object Type 5-6

Controlling Users as an Object Type

5-7

Controlling Who Can Add an Object Type

5-8

OBJECTTYPE Auditing 5-9