Jane.doe at 12:34, 28 November 2019

2019-11-28T12:34:41Z

← Older revision		Revision as of 12:34, 28 November 2019
Line 50:		Line 50:
	=See also=		=See also=
	* {{Template:Sec}}		* {{Template:Sec}}

			[[Category:Security]]

Darya.zelenina: Added a link to the security manual

2019-02-16T05:36:06Z

Added a link to the security manual

← Older revision		Revision as of 05:36, 16 February 2019
Line 47:		Line 47:
	==Access==		==Access==
	Specify one or more [[Object access type\|access types]].		Specify one or more [[Object access type\|access types]].

			=See also=
			* {{Template:Sec}}

Darya.zelenina at 05:24, 16 February 2019

2019-02-16T05:24:15Z

← Older revision		Revision as of 05:24, 16 February 2019
Line 11:		Line 11:
	(IDENTIFIER=identifier[+identifier...] [,OPTIONS=attributes[+attributes...]] ,ACCESS=access-type[+access-type...])		(IDENTIFIER=identifier[+identifier...] [,OPTIONS=attributes[+attributes...]] ,ACCESS=access-type[+access-type...])

	==~~identifier~~==		==Identifier==

	Specifies a user or groups of users whose access to an object is defined in the ACE. A system manager creates or removes [[Identifier\|identifiers]] and grants them to users.		Specifies a user or groups of users whose access to an object is defined in the ACE. A system manager creates or removes [[Identifier\|identifiers]] and grants them to users.

	==~~options~~==		==Options==

	The following options can be specified for Identifier ACEs:		The following options can be specified for Identifier ACEs:
Line 45:		Line 45:
	\|}		\|}

	==~~access~~==		==Access==
	Specify one or more [[Object access type\|access types]].		Specify one or more [[Object access type\|access types]].

Darya.zelenina: Created page with "An '''Identifier ACE''' is an Access Control Entry that controls the type of access allowed to a particular user or group of users. An example of an Identifier ACE is..."

2018-08-23T05:35:10Z

Created page with "An '''Identifier ACE''' is an Access Control Entry that controls the type of access allowed to a particular user or group of users. An example of an Identifier ACE is..."

New page

An '''Identifier ACE''' is an [[ACE|Access Control Entry]] that controls the type of access allowed to a particular user or group of users.

An example of an Identifier ACE is as follows:

<pre>(IDENTIFIER=SALES,ACCESS=READ+WRITE)</pre>

A system manager can use the Authorize utility (AUTHORIZE) to grant the SALES identifier to a specific group of users. Read and write access to the file INVENTORY.DAT is then granted to users who hold the SALES identifier.

=Format=

(IDENTIFIER=identifier[+identifier...] [,OPTIONS=attributes[+attributes...]] ,ACCESS=access-type[+access-type...])

==identifier==

Specifies a user or groups of users whose access to an object is defined in the ACE. A system manager creates or removes [[Identifier|identifiers]] and grants them to users.

==options==

The following options can be specified for Identifier ACEs:

{| class="wikitable"
|-
| Default || Indicates that an ACE is to be included in the ACL of any files created within a directory. When the entry is propagated, the Default attribute is removed from the ACE of the created file. This attribute is valid for directory files only.
|-
| Hidden || Indicates that this ACE should be changed only by the application that adds it. Although the Hidden attribute is valid for any ACE type, its intended use is to hide Application ACEs. To delete or modify a hidden ACE, you must use the SET SECURITY command.
Users need the SECURITY privilege to display a hidden ACE with the DCL commands SHOW SECURITY or DIRECTORY/SECURITY. SECURITY privilege is also required to modify or delete a hidden ACE with the DCL command SET SECURITY. The ACL editor displays the ACE only to show its relative position within the ACL, not to facilitate editing of the ACE. To create a hidden ACE, an application can invoke the $SET_SECURITY system service.
|-
| Protected || Protects the ACE against casual deletion. Protected ACEs can be deleted only in the following ways:
* By using the ACL editor
* By specifying the ACE explicitly when deleting it
Use the command SET SECURITY/ACL=(ace)/DELETE to specify and delete an ACE.

By deleting all ACEs, both protected and unprotected
Use the command SET SECURITY/ACL/DELETE=ALL to delete all ACEs.

The following commands do not delete protected ACEs:

SET SECURITY/ACL/DELETE
SET SECURITY/LIKE
SET SECURITY/DEFAULT
|-
| Nopropagate || Indicates that the ACE cannot be copied by operations that usually propagate ACEs. For example, the ACE cannot be copied by the SET SECURITY/LIKE or SET SECURITY/DEFAULT commands.
|-
| None || Indicates that no attributes apply to an entry. Although you can create an ACL entry with OPTIONS=None, the attribute is not displayed. Whenever you specify additional attributes with the None attribute, the other attributes take precedence. The None attribute is equivalent to omitting the field.
|}

==access==
Specify one or more [[Object access type|access types]].

Identifier ACE - Revision history

Jane.doe at 12:34, 28 November 2019

Darya.zelenina: Added a link to the security manual

Darya.zelenina at 05:24, 16 February 2019

Darya.zelenina: Created page with "An '''Identifier ACE''' is an Access Control Entry that controls the type of access allowed to a particular user or group of users. An example of an Identifier ACE is..."