HP zx2000 Supplementary Manual page 38

configuring an X Server on HP-UX
Syntax
<operation>
<action>
4–26
Security Section Syntax (Continued)
Description
Can be r (read), w (write), or d (delete). The following table shows how X
Protocol property requests map to these operations in The Open Group
server implementation.
GetProperty r, or r and d if delete = True
ChangeProperties
RotateProperties r and w
DeleteProperty
ListProperties none, untrusted clients can always list all properties
Can be a (allow), i (ignore), or e (error). Allow means execute the request
as if it had been issued by a trusted client. Ignore means treat the request
as a no-op. In the case of GetProperty, ignore means return an empty
property value if the property exists, regardless of its actual value. Error
means do not execute the request and return a BadAtom error with the
atom set to the property name. Error is the default action for all properties,
including those not listed in the security policy file.
An <action> applies to all <operation>s that follow it, until the next
<action> is encountered. Thus, irwad means ignore read and write, allow
delete.
GetProperty and RotateProperties may do multiple operations (r and
d, or r and w). If different actions apply to the operations, the most severe
action is applied to the whole request; there is no partial request execution.
The severity ordering is: allow < ignore < error. Thus, if the <perms> for a
property are ired (ignore read, error delete), and an untrusted client
attempts GetProperty on that property with delete = True, an error is
returned, but the property value is not. Similarly, if any of the properties in
a RotateProperties do not allow both read and write, an error is
returned without changing any property values.
w
d
Graphics Administration Guide