Download HP DECset for OpenVMS Guide to the Code Management System

Security Features
7.2 CMS ACLs
3.
$ CMS SET ACL/OBJECT_TYPE=LIBRARY ELEMENT_LIST _$/ACL=((IDENTIFIER=JONES,ACCESS=CREATE+CONTROL), _$ (IDENTIFIER=FLYNN,OPTIONS=DEFAULT,ACCESS=FETCH), _$ (IDENTIFIER=SMITH,OPTIONS=DEFAULT,ACCESS=RESERVE+REPLACE)) ""
%CMS-S-MODACL, modified access control list for subtype
DISKX:[PROJECT.CMSLIB]ELEMENT_LIST
$ CMS SHOW ACL/OBJECT_TYPE=LIBRARY ELEMENT_LIST
ACLs in CMS Library DISKX:[PROJECT.CMSLIB]
ELEMENT_LIST
(IDENTIFIER=[WORK,JONES],ACCESS=CREATE+CONTROL)
(IDENTIFIER=[WORK,FLYNN],OPTIONS=DEFAULT,ACCESS=FETCH)
(IDENTIFIER=[WORK,SMITH],OPTIONS=DEFAULT,ACCESS=REPLACE+RESERVE)
$ CMS CREATE ELEMENT ELEMENT.4 ""
%CMS-S-CREATED, element DISKX:[PROJECT.CMSLIB]ELEMENT.4 created
$ CMS SHOW ACL/OBJECT_TYPE=ELEMENT ELEMENT.4
ACLs in CMS Library DISKX:[PROJECT.CMSLIB]
ELEMENT.4
(IDENTIFIER=[WORK,FLYNN],ACCESS=FETCH)
(IDENTIFIER=[WORK,SMITH],ACCESS=REPLACE+RESERVE)
In this example, user JONES assigns an ACL on the element list. The ACL
specifies the following:
•
JONES is allowed CREATE and CONTROL access to the element list.
•
By using OPTIONS=DEFAULT, JONES assigns user FLYNN only
FETCH access to new elements created in the library.
•
By using OPTIONS=DEFAULT, JONES assigns user SMITH only
REPLACE and RESERVE access to new elements created in the
library.
JONES then successfully creates a new element named ELEMENT.4.
When the SHOW ACL command is entered, the default access on the
element for each user is displayed. User JONES’s access is not displayed
because he has access to the element list, not the element itself.
7.2.3.3 Specifying ACLs on Libraries and History
Specifying a CMS ACL on the library or the library history enables you to
restrict one or more users from certain types of access to the library, or from
certain types of access to the library history. You can restrict users from the
following types of access to the library:
•
MODIFY
•
REPAIR
Security Features 7–23