XYGATE Access Control Reference Manual

XYGATE
®
Access Control Reference Manual
Appendix C: The ACACL File
XYPRO Technology Corporation 225 Proprietary and Confidential
Example 1: XAC Command Entry - USER argument is an alias
COMMAND test
USER ALIAS: "ROLE" ! underlying userid is 223,24
ACL $EVERYONE
OBJECT $SYSTEM.SYSNN.TACL
START_LOGGED_ON
USER_SWTICH SAFEGUARD_PRIVLOGON
QUIET
INPUT "#OUTPUT [#PROCESSINFO /LOGONNAME/], USER: [#PROCESSINFO/PAID/]"
INPUT "SETPROMPT NONE"
PROMPT "'(',PAID,')'"
Example 2: Logon as a user and execute above XAC Command
$VIK IK 53> #OUTPUT [#PROCESSINFO/LOGONNAME/], USER:[#PROCESSINFO/PAID/]
XYPRO.IK, USER:222,52
$VIK IK 54> XAC test
XAC – Error 00048,00001 calling user_authenticate_ for ROLE
$VIK IK 55> SAFECOM
= ADD DISKFILE XYGATEAC.XYGATEAC, PRIV-LOGON ON, ACCESS \*.253,1 (R,W,E,P,C,O),
LICENSE ON
= ALTER DISKFILE XYGATEAC.XYGATEAC, ACCESS \*.*,* (R,E)
=EXIT
$VIK IK 56> XAC test
ROLE, USER: 223,24
(223,24)3>
Example 3: XAC Command Entry - USER argument is a user
COMMAND test
USER ROLE.SECMGR ! userid is 223,24
ACL $EVERYONE
OBJECT $SYSTEM.SYSNN.TACL
START_LOGGED_ON
USER_SWTICH SAFEGUARD_PRIVLOGON
QUIET
INPUT "#OUTPUT [#PROCESSINFO /LOGONNAME/], USER: [#PROCESSINFO/PAID/]"
INPUT "SETPROMPT NONE"
PROMPT "'(',PAID,')'"
Example 4: Logon as a user and execute above XAC Command
$VIK IK 59> #OUTPUT [#PROCESSINFO/LOGONNAME/], USER:[#PROCESSINFO/PAID/]
XYPRO.IK, USER:222,52
$VIK IK 60> XAC test
ROLE.SECMGR, USER: 223,24
(223,24)3>