Safeguard Reference Manual (G06.24+, H06.03+ )

Disk-File Security Commands
Safeguard Reference Manual—520618-013
8-67
SET DISKFILE-PATTERN Command
-
(minus-sign) operates on existing ACL entries. The minus-sign form of
access-spec modifies the current default ACL. The authority entries
are removed from the default ACL entries for the users specified with
user-list.
DENY
denies the users or groups specified by user-list the access authorities
specified by authority-list.
authority-list
specifies the access authorities to be granted (or denied) to user-list.
authority-list can be any one of:
authority
( authority [ , authority ] ... )
*
authority
is any one of:
R[EAD]
W[RITE]
E[XECUTE]
P[URGE]
C[REATE]
O[WNER]
*
(asterisk) specifies all the disk-file access authorities (R, W, E, P, C,
and O).
AUDIT-ACCESS-PASS [audit-spec]
changes the audit-spec for successful attempts to access the diskfile
pattern. The form of audit-spec is:
{ ALL | LOCAL | REMOTE | NONE }
For a description of audit-spec, see the SET DISKFILE Command on
page 8-55. Omitting audit-spec specifies NONE.
Note. Specifying ACCESS access-spec through the ADD command does not
override the current default ACL (established through the SET command). Instead,
any ACL entries specified with the ADD command are added to the current default
ACL, and the entire ACL is defined for the disk file whose authorization record is being
added.