Safeguard Reference Manual (G06.24+, H06.03+ )

Process and Subprocess Security Commands
Safeguard Reference Manual—520618-013
11-12
ALTER PROCESS and SUBPROCESS Commands
AUDIT-MANAGE-FAIL [audit-spec]
changes the audit-spec for unsuccessful attempts to manage (change or
read) this authorization record. The form of audit-spec is:
{ ALL | LOCAL | REMOTE | NONE }
For a description of each audit-spec, see the SET PROCESS and
SUBPROCESS Commands on page 11-27. Omitting audit-spec specifies
NONE.
WARNING-MODE { ON | OFF }
defines whether warning mode is enabled for the specified process or
subprocess. The value is required. For details on warning mode, see the
Safeguard Administrator's Manual.
ON enables warning mode for the specified process or subprocess. The initial
value is OFF, which disables warning mode for the specified process or
subprocess.
Consideration
Any attribute specifications in an ADD PROCESS or SUBPROCESS command affect
only the record or records being added, but do not alter the default attribute values.
This condition is also true for a LIKE clause in an ADD PROCESS or SUBPROCESS
command.
Example
A user adds an authorization record for the process name $ADD:
=ADD PROCESS $add, ACCESS \*.33,* (r,w,c); 255,* *
The ACCESS attribute in this ADD PROCESS command grants READ, WRITE, and
CREATE authorities to all network users who are members of group 33 and grants all
access authorities (READ, WRITE, CREATE, PURGE, and OWNER) to all members of
the super group.
ALTER PROCESS and SUBPROCESS Commands
ALTER PROCESS or SUBPROCESS changes one or more attribute values in an
authorization record.
An owner of the authorization record, the primary owner’s group manager, and the
super ID can change the attribute values defined for a process or subprocess name.
Except for the ACCESS attribute, specifying a new attribute value in ALTER
PROCESS or SUBPROCESS replaces the current attribute value with the specified
value.