Safeguard Reference Manual (G06.24+, H06.03+ )

OBJECTTYPE Security Commands
Safeguard Reference Manual—520618-013
12-28
THAW OBJECTTYPE Command
[ NO ACCESS CONTROL LIST DEFINED! ]
indicates no default ACL entries are defined. Use SET OBJECTTYPE...ACCESS
to define default ACL entries. You can use ADD OBJECTTYPE...ACCESS to
define ACL entries when you create an authorization record.
Example
This SHOW OBJECTTYPE report displays the current default object type attribute
values for a class of objects. To display the report:
=SHOW OBJECTTYPE
The report shows:
These current default values indicate that:
•
The owner of an object type that has these attribute values is the local super-group
member with user ID 255,18.
•
The Safeguard software audits all successful and unsuccessful attempts to create
an authorization record for any specific object belonging to an object class defined
by a future ADD OBJECTTYPE command.
•
The users with user IDs 33,13 and 255,18 as well as the group manager for group
33 have CREATE and OWNER authorities for the authorization record to be
created for this object class.
THAW OBJECTTYPE Command
THAW OBJECTTYPE reenables the ACL for a frozen object class. The authority
granted the user is reinstated.
The primary owner, the primary owner’s group manager, and the local super ID can
thaw a frozen object class. In addition, any user ID with OWNER authority on the ACL
can also thaw the object-class authorization record.
THAW OBJECTTYPE has no effect on an object class that is not frozen.
Caution. If you do not specify an ACL for an object class, only the local super ID can add an
authorization record for an object of that object class.
TYPE OWNER
OBJECTTYPE 255,18
AUDIT-ACCESS-PASS = ALL AUDIT-MANAGE-PASS = NONE
AUDIT-ACCESS-FAIL = ALL AUDIT-MANAGE-FAIL = NONE
033,013 C,O
033,255 C,O
255,018 C,O
THAW OBJECTTYPE objecttype-list