Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Disk-File Security Commands
Safeguard Reference Manual — 520618-030
8 - 21
ALTER DISKFILE Command
You can use the LIKE disk-file-name clause to define all the disk-file attribute
values for a disk file, and then change one or more of the attribute values by
specifying new values after the LIKE keyword. For example, this command adds
an authorization record for MEMO1 that has the same disk-file attribute values as
MEMO2 except for the OWNER attribute:
=ADD DISKFILE memo1, LIKE memo2, OWNER sales.kidd
Using the LIKE clause with an ADD DISKFILE command does not change any of
the current default disk-file attribute values.
•
Securing partitioned files
To secure a partitioned disk file completely, add a separate disk-file authorization
record for each partition. Adding an authorization record for only the primary
partition protects the partitioned file from any accesses made by opening the
primary partition but does not prevent the secondary partitions from being opened
individually.
Examples
1. To add a protection record that describes all production data base files that reside
on $DATA with subvolume names that begin with PROD:
ADD DISKFILE-PATTERN $DATA.PROD*.*, &
ACCESS PROD.* (R,W)
2. To add a diskfile pattern for all files in subvolume $A.B:
ADD DISKFILE-PATTERN $A.B.*, ACCESS *.* (R,W)
3. To add a diskfile-pattern protection record for every disk file named FILE followed
by one alphanumeric character that is in a subvolume REPORT on every volume
beginning with $DATA:
ADD DISKFILE-PATTERN $DATA*.REPORT.FILE?
ALTER DISKFILE Command
ALTER DISKFILE changes one or more disk file attribute values in an existing disk file
authorization record. The primary owner of a disk file, the primary owner’s group
manager, the local super ID, and any user with OWNER authority on the ACL can
change a disk file authorization record.
Except for the ACCESS attribute, new attribute values specified in an ALTER
DISKFILE command replace the existing attribute value with the specified value. Using
ALTER DISKFILE to specify a new ACCESS access-spec adds the new access-