Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Table Of Contents
Disk-File Security Commands
Safeguard Reference Manual 520618-030
8 - 38
DELETE DISKFILE-PATTERN Command
TRUSTME (H-series only)
TRUSTSHARED (H-series only)
Considerations
Deleting a disk-file authorization record places the file under standard Guardian
security.
When you delete a disk-file authorization record, the disk file is no longer subject to
Safeguard authorization checks and auditing. All subsequent accesses to the disk
file are subject to standard Guardian disk-file security checks.
When the Safeguard software deletes a disk-file authorization record, the
security-string for the file is reset to the original value. (That is, the file
receives the security it had before being added to Safeguard protection.)
Deleting a disk-file authorization record does not change these disk-file attributes:
Users who have PURGE authority can delete a disk file’s authorization record.
Only an owner of a disk file, the primary owners group manager, and the super ID
can delete a disk file authorization record through DELETE DISKFILE. However,
any user who can purge the disk file itself can delete the file authorization record
unless PERSISTENT protection is specified for the file. (Purging a file that does
not have PERSISTENT protection deletes the Safeguard record for the file.)
Example
The PRS group manager (who has user ID 86,255) deletes the authorization record for
the file $DATA.KEEP.INFO:
=DELETE DISKFILE $data.keep.info
DELETE DISKFILE-PATTERN Command
DELETE DISKFILE-PATTERN deletes the pattern authorization record for a diskfile
pattern.
The owner of a diskfile pattern, the primary owner’s group manager, the local super ID,
and any user with OWNER authority on the ACL can delete a diskfile-pattern
authorization record.
LICENSE ON The disk file remains licensed.
PROGID ON The PROGID security option remains in effect.
CLEARONPURGE ON The CLEARONPURGE security option remains in effect.
DELETE DISKFILE-PATTERN pattern-spec-list
[ , ] [ ALL ] [ WHERE option-list ]