XYGATE Access Control Reference Manual

XYGATE
®
Access Control Reference Manual
Appendix C: The ACACL File
XYPRO Technology Corporation 142 Proprietary and Confidential
Note: Due to current operating system restrictions, if user is specified as
ALIAS:"<Safeguard Alias>", the actual PAID of the process will be the
underlying userid to which the alias was assigned when it was created in
Safeguard.
In the Example below, this XAC ACACL Command Entry runs as
SUPER.OPERATOR. Only users in group 10 can execute this command.
Example:
COMMAND TCPIPUP
DESCRIPTION "Uses SCF to INITIATE TCPIP processes"
USER SUPER.OPERATOR
OBJECT $SYSTEM.SYSNN.TACL
ACL 10,*
FILE $SYSTEM.STARTUP.TCPIPUP
In the Example below, this XAC ACACL Command Entry starts a TACL as the Group
Manager. All users in groups 10 and 12 can execute this command. When started by a
user in group 10, the TACL will execute as 10,255. When started by a user in
group 12, the TACL will execute as 12,255.
Example:
COMMAND MANAGER-TACL
DESCRIPTION "Starts TACL as your group’s manager"
USER GROUP,255
OBJECT $SYSTEM.SYSNN.TACL
ACL 10,* 12,*
The Example below starts a TACL in a logged off state. The GROUP,USER keyword
indicates that the userid is determined by who logs on.
Example:
COMMAND TCPIP-AUDITED-TACL
DESCRIPTION "TACL FROM TCP/IP"
USER GROUP,USER
OBJECT $SYSTEM.SYSNN.TACL
ACL $EVERYONE
START_LOGGED_OFF
OPENSBYOBJECTS $*.*.*
STOPONERROR 60,66,140,190,191
TRACKUSERID EXECUTEHANGUP FC? FCPROMPT "> "
The Example below executes EDIT using the userid of the user who typed XAC EDIT.
Example:
COMMAND EDIT
DESCRIPTION "EDIT WITH FC BUILT INTO IT"
USER GROUP,USER
OBJECT $SYSTEM.SYSTEM.EDIT
ACL $EVERYONE
OPENSBYOBJECTS $SYSTEM.SYSTEM.VS
FC? FCPROMPT "*"