Safeguard Administrator's Manual (G06.29+, H06.08+, J06.03+)

OBJECTTYPE Control
Safeguard Administrator’s Manual—523317-029
5-7
Controlling an Entire Object Type
The OBJECTTYPE command restricts who can use SAFECOM to create protection
records for a given type of object. For example, an OBJECTTYPE DISKFILE
authorization record restricts who can use SAFECOM to create disk-file authorization
records. However, OBJECTTYPE DISKFILE does not affect any default protection
specified for a user's disk files. That is, the Safeguard software automatically creates
these protection records regardless of the access control list associated with the
OBJECTTYPE DISKFILE authorization record.
The following sample procedure shows how to add an object type to the Safeguard
database with a simple access control list. In this case, only group 12 is given authority
to add individual device names to the Safeguard database. After the access control list
is created, ownership of the authorization record is transferred to user ID 12,8.
1. Create an authorization record for OBJECTTYPE DEVICE with an access control
list that grants CREATE authority to all users who have group 12 as their
administrative group:
=ADD OBJECTTYPE DEVICE, ACCESS 12,* C
2. Transfer ownership to user ID 12,8:
=ALTER OBJECTTYPE DEVICE, OWNER 12,8
3. Display the authorization record for OBJECTTYPE DEVICE:
=INFO OBJECTTYPE DEVICE
The display shows:
If you want the same group to control subdevice names, use the LIKE keyword when
adding OBJECTTYPE SUBDEVICE, thereby giving its authorization record the same
attributes as OBJECTTYPE DEVICE:
=ADD OBJECTTYPE SUBDEVICE, LIKE DEVICE
Note. Starting with H06.26/J06.15 RVUs, the OBJECTTYPE
DISKFILE/VOLUME/SUBVOLUME is granted additional access permissions, WRITE (W) and
PURGE (P), along with the existing CREATE (C) and OWNER (O) permissions. Members
having the WRITE (W) permission on OBJECTTYPE DISKFILE/VOLUME/SUBVOLUME can
modify the respective DISKFILE/VOLUME/SUBVOLUME protection records. Members having
the PURGE (P) permission on OBJECTTYPE DISKFILE/VOLUME/SUBVOLUME can purge
the respective DISKFILE/VOLUME/SUBVOLUME protection records.
LAST-MODIFIED OWNER STATUS WARNING-MODE
OBJECTTYPE DEVICE
26JAN88, 11:00 12,8 THAWED OFF
012,* C