Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

OBJECTTYPE Security Commands
Safeguard Reference Manual — 520618-030
12 - 10
ALTER OBJECTTYPE Command
Considerations
•
Additional owners can modify the authorization record.
In addition to the primary owner, the primary owner’s group manager, and the local
super ID, any user ID that has an ACL entry granting OWNER authority can also
modify the OBJECTTYPE authorization record.
•
Attributes in an ADD command affect only the record added.
Any attribute specifications in an ADD OBJECTTYPE command affect only the
authorization record being created and do not change the current default
OBJECTTYPE attribute values. This condition is also true for a LIKE clause in an
ADD OBJECTTYPE command.
Example
You can use a LIKE objecttype-name clause to copy all attribute values for one
class of objects from another class of objects. Then you can specify in the same
command line that one or more attribute values will be different.
This sample command adds an authorization record for DEVICE that has the same
OBJECTTYPE attribute values (and ACL) as PROCESS, except for the OWNER
attribute:
=ADD OBJECTTYPE device, LIKE process, OWNER super.bob
ALTER OBJECTTYPE Command
ALTER OBJECTTYPE changes one or more attribute values in an OBJECTTYPE
authorization record. The owner, the primary owner’s group manager, and the super ID
can change an OBJECTTYPE authorization record. In addition, any user ID that has
an ACL entry granting it O[WNER] authority can modify the OBJECTTYPE
authorization record.
Except for the ACCESS attribute, new object type attribute values specified in an
AL
TER OBJECTTYPE command replace the existing attribute value. Specifying a new
ACCESS access-spec adds the new access-spec to the object type’s existing
ACL. To remove authorities previously granted to user IDs, use the minus-sign (-) form
of access-spec.
ALTER OBJECTTYPE objecttype-list [ , ]
{ LIKE objecttype-spec | objecttype-attribute }
[ , objecttype-attribute ] ...