HP Integrity NonStop J-Series - Manual (Page 44)

Securing Disk Files
Safeguard User’s Guide — 422089-020
3 - 10
Specifying Access With the ALTER DISKFILE
Command
The display shows:
An entry for user ID 9,23 has been added.
When you specify a new access control list entry, that entry does not replace the
existing entries. It is added to them. Similarly, if you specify an access authority for a
user ID that is already on the list, the new authority is added to the entry for that user
ID. The new authority does not replace the existing authorities.
You can also use the ALTER DISKFILE command to deny access authorities to users
already on the access control list. For example, as a member of group 2, user 2,6 has
READ and WRITE authority to the file quarter1. Suppose you want to limit this user's
authority to READ only. To deny the user's WRITE authority:
=ALT DISK quarter1, ACCESS 2,6 DENY W
To verify the denial:
=INFO DISKFILE quarter1
The display shows:
User ID 2,6 has been denied WRITE authority.
Assume you want to use the default PROCESS-ACCESS control list for a file named
TEST and you also want to add user 2,1 with only execute process-access
=ALTER DISKFILE TEST,PROCESS-ACCESS 2,1 E
To see the settings for TEST.
=INFO DISKFILE TEST
LAST-MODIFIED OWNER STATUS WARNING-MODE
$DATA.SALES
QUARTER1 23JUL05, 15:08 2,1 THAWED OFF
002,001 R,W,E,P
002,018 R,W,E,P
004,012 R
008,004 DENY R
009,023 R,W
002,* R,W
008,* R
LAST-MODIFIED OWNER STATUS WARNING-MODE
$DATA.SALES
QUARTER1 23JUL05, 15:15 2,1 THAWED OFF
002,001 R,W,E,P
002,006 DENY W
002,018 R,W,E,P
004,012 R
008,004 DENY R
009,023 R,W
002,* R,W
008,* R