Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Security Group Commands
Safeguard Reference Manual — 520618-030
13 - 30
SET SECURITY-GROUP Command
REMOTE
Only unsuccessful management attempts made by remote users are
audited.
NONE
No unsuccessful management attempts are audited.
Omitting audit-spec specifies NONE.
Example
These commands define default values for a new security group:
=SET SECURITY-GROUP OWNER prs.manager
=SET SECURITY-GROUP AUDIT-ACCESS-PASS all, &
=AUDIT-MANAGE-PASS local
=SET SECURITY-GROUP ACCESS 33,* (e,o); (86,*, 255,*) *
=SET SECURITY-GROUP ACCESS prs.harry DENY *
The default group attribute values defined in this example are:
•
The security group owner is the manager of the PRS group.
•
The Safeguard software audits all successful attempts to execute a restricted
command, as well as successful local attempts to manage a security group
authorization record.
•
All members of groups 33, 86, and 255 can execute restricted commands and
manage security group authorization records (except for user PRS.HARRY, who is
specifically denied all access).
The SET command is a SAFECOM environmental command that establishes default
values for the attributes. These values are used whenever the ADD command does not
explicitly state the value of the attribute.
To set all SECURITY-GROUP protection record attributes like those set in the
SECURITY-OSS-ADMINISTRATOR security group:
=SET SECURITY-GROUP LIKE SECURITY-OSS-ADMINISTRATOR
To set all SECURITY-GROUP protection record attributes like those set in the
SECURITY-PRV-ADMINISTRATOR security group:
=SET SECURITY-GROUP LIKE SECURITY-PRV-ADMINISTRATOR
To set all SECURITY-GROUP protection record attributes like those set in the
SEC
URITY-AUDITOR security group:
=SET SECURITY-GROUP LIKE SECURITY-AUDITOR
To set all SECURITY-GROUP protection record attributes like those set in the
SECURITY
-MEDIA-ADMIN security group, use the following command:
=SET SECURITY-GROUP LIKE SECURITY-MEDIA-ADMIN