Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

OBJECTTYPE Security Commands
Safeguard Reference Manual — 520618-030
12 - 29
SET OBJECTTYPE Command
NONE
No successful management attempts are audited.
Omitting audit-spec specifies NONE.
AUDIT-MANAGE-FAIL [audit-spec]
establishes an audit-spec for unsuccessful attempts to manage an
objecttype-authorization record. This audit-spec specifies the conditions
under which an audit record is written to the audit file when an attempt to
manage an OBJECTTYPE authorization record fails.
The form of audit-spec is:
{ ALL | LOCAL | REMOTE | NONE }
ALL
All unsuccessful management attempts are audited.
LOCAL
Only unsuccessful management attempts made by local users are audited.
REMOTE
Only unsuccessful management attempts made by remote users are
audited.
NONE
No unsuccessful management attempts are audited.
Omitting audit-spec specifies NONE.
Example
These commands define default values for a new object class:
=SET OBJECTTYPE OWNER prs.manager
=SET OBJECTTYPE AUDIT-ACCESS-PASS all, &
=AUDIT-MANAGE-PASS local
=SET OBJECTTYPE ACCESS 33,* (c,o); (86,*, 255,*) *
=SET OBJECTTYPE ACCESS prs.harry DENY *
The default object-class attribute values defined here are:
•
The object-class owner is the manager of the PRS group.
•
The Safeguard software audits all successful attempts to add an authorization
record for a specific object, as well as successful local attempts to manage the
authorization record for that type.