Managing Users and Security
Guardian User’s Guide—425266-001
16-14
Accessing Disk Files
For example, if you want to secure the file MYFILE as:
Read access any local or remote user (N)
Write access local owner only (O)
Execute access any local or remote user (N)
Purge access local owner only (O)
Enter this FUP command at the TACL prompt:
Each letter in NONO sets the respective RWEP attribute for MYFILE.
Accessing Disk Files
A user who accesses a disk file is classified as either a local or remote user. A local user
is logged on to the system where the file resides; a remote user is logged on to a
different system in the network. The security level of the user of a file is determined by:
User ID Whether the opener is the owner of the file, a member of the owner’s
group, or a member of another group
Location Whether the opener is local or remote with respect to the file
When you attempt to access a file, your security level is checked against the file’s
security level for the requested access mode (RWEP), as defined in Table 16-4
.
Table 16-5
shows the permissions required for users to access files on local or remote
nodes.
For example, if a file owned by ADMIN.BILL is secured by the FUP SECURE
command as follows:
> FUP SECURE MYFILE, "NONO"
Table 16-5. Allowed Disk-File Access
If the user ID is
The user can access the file on
the same node if the file has any
of these permissions
The user can access the file on
any node if the file has any of
these permissions
Super ID -, O, G, A U, C, N
Owner or owner’s
group manager
O, G, A U, C, N
Member of owner’s
group
G, A C, N
Any user A N
-SECURE BILLFILE, "AGNU"