Safeguard Administrator's Manual (G06.29+, H06.08+, J06.03+)

OBJECTTYPE Control
Safeguard Administrator’s Manual—523317-029
5-2
1. Log on as SUPER.SUPER.
2. Create a DISKFILE OBJECTTYPE and set ACL to give C, O authority to user E.F.
=ADD OBJECTTYPE DISCFILE, ACCESS E.F(C,O)
=INFO OBJECTTYPE DISCFILE
The display shows:
3. Log on as E.F and alter the DISKFILE OBJECTTYPE to set ACL to give C
authority to user A.B.
= ALTER OBJECTTYPE DISCFILE, ACCESS A.B (C)
= INFO OBJECTTYPE DISCFILE
The display shows:
4. Log on as A.B. When A.B tries to alter DISKFILE OBJECTTYPE, it results in
security violation because A.B does not have OWNER(O) authority.
= INFO OBJECTTYPE DISCFILE, DET
The display shows:
Note. SUPER.SUPER is the privileged user authorized to modify ACLs.
LAST-MODIFIED OWNER STATUS
DISCFILE
18JUN08, 8:25 SUPER.SUPER THAWED
E.F C,O
Note. User E.F has OWNER(O) authority and hence can set ACL to give C
authority to user A.B.
LAST-MODIFIED OWNER STATUS
DISCFILE
18JUN08, 8:56 SUPER.SUPER THAWED
A.B C
E.F C,O
LAST-MODIFIED OWNER STATUS
DISCFILE
18JUN08, 8:56 SUPER.SUPER THAWED
A.B C
E.F C,O
OBJECT-TEXT-DESCRIPTION =
AUDIT-ACCESS-PASS = NONE AUDIT-MANAGE-PASS = NONE
AUDIT-ACCESS-FAIL = NONE AUDIT-MANAGE-FAIL = NONE
=alter objecttype diskfile, access user.user1 o
* ERROR * RECORD FOR OBJECTTYPE DISCFILE: SECURITY VIOLATION