Safeguard Reference Manual (G06.24+, H06.03+ )

OBJECTTYPE Security Commands
Safeguard Reference Manual—520618-013
12-13
DELETE OBJECTTYPE Command
AUDIT-MANAGE-PASS [audit-spec]
changes the audit-spec for successful attempts to manage this
authorization record. The form of audit-spec is:
{ ALL | LOCAL | REMOTE | NONE }
For a description of the audit-spec variables, see the SET OBJECTTYPE
Command on page 12-20. Omitting audit-spec specifies NONE.
AUDIT-MANAGE-FAIL [audit-spec]
changes the audit-spec for unsuccessful attempts to manage this
authorization record. The form of audit-spec is:
{ ALL | LOCAL | REMOTE | NONE }
For a description of the audit-specs, see the SET OBJECTTYPE Command
on page 12-20. Omitting audit-spec specifies NONE.
Example
This command transfers ownership of the DISKFILE object type to the user with user
ID 86,13 and allows all users who are members of group number 86 to add new disk
file authorization records:
=ALTER OBJECTTYPE DISKFILE , OWNER 86,13, ACCESS 86,* c
DELETE OBJECTTYPE Command
DELETE OBJECTTYPE deletes an OBJECTTYPE authorization record. After an
OBJECTTYPE authorization record is deleted, that class of objects is subject to
Safeguard authorization checks as described in Table 12-1 on page 12-2.
The primary owner, the primary owner’s group manager, and the super ID can delete
an OBJECTTYPE authorization record. In addition, any user ID that has an ACL entry
granting it OWNER authority can also delete the OBJECTTYPE authorization record.
objecttype-list
specifies one or more OBJECTTYPEs for which authorization records are to be
deleted. objecttype-list can be either:
objecttype-spec
( objecttype-spec [ , objecttype-spec ] ... )
DELETE OBJECTTYPE objecttype-list