Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Table Of Contents
OBJECTTYPE Security Commands
Safeguard Reference Manual 520618-030
12 - 17
FREEZE OBJECTTYPE Command
USER
VOLUME
Example
As owner of the object class DEVICE, you can enter the command to delete the
Safeguard authorization record for OBJECTTYPE DEVICE:
=DELETE OBJECTTYPE device
FREEZE OBJECTTYPE Command
FREEZE OBJECTTYPE temporarily suspends the authorities granted to user IDs listed
on an object-class ACL. While the object class is frozen, only the primary owner, the
owner’s group manager, an owner on the ACL, and the local super ID can create
authorization records for that type of object.
Use the THAW OBJECTTYPE command to reenable all the ACL authorities granted to
user IDs before the object class was frozen.
objecttype-list
specifies the object class for which access is to be frozen. objecttype-list can
be either:
objecttype-spec
( objecttype-spec [ , objecttype-spec ] ... )
objecttype-spec
can be any object-class name, including OBJECTTYPE:
DEVICE
DISKFILE
DISKFILE-PATTERN
SAVED-DISCFILE-PATTERN
OBJECTTYPE
PROCESS
SUBDEVICE
SUBPROCESS
SUBVOLUME
USER
VOLUME
Consideration
While a class of objects is frozen, the primary owner, the owner’s group manager, and
an owner on the ACL are implicitly granted all the access authorities.
FREEZE OBJECTTYPE objecttype-list