Accessing Disk Files; Table 16-5. Allowed Disk-File Access - HP Guardian User Manual

Managing Users and Security
For example, if you want to secure the file MYFILE as:
Read access
Write access
Execute access
Purge access
Enter this FUP command at the TACL prompt:
> FUP SECURE MYFILE, "NONO"
Each letter in NONO sets the respective RWEP attribute for MYFILE.

Accessing Disk Files

A user who accesses a disk file is classified as either a local or remote user. A local user
is logged on to the system where the file resides; a remote user is logged on to a
different system in the network. The security level of the user of a file is determined by:
User ID
Location
When you attempt to access a file, your security level is checked against the file's
security level for the requested access mode (RWEP), as defined in
Table 16-5 shows the permissions required for users to access files on local or remote
nodes.

Table 16-5. Allowed Disk-File Access

If the user ID is
Super ID
Owner or owner's
group manager
Member of owner's
group
Any user
For example, if a file owned by ADMIN.BILL is secured by the FUP SECURE
command as follows:
-SECURE BILLFILE, "AGNU"
any local or remote user (N)
local owner only (O)
any local or remote user (N)
local owner only (O)
Whether the opener is the owner of the file, a member of the owner's
group, or a member of another group
Whether the opener is local or remote with respect to the file
The user can access the file on
the same node if the file has any
of these permissions
-, O, G, A
O, G, A
G, A
A
Guardian User's Guide —425266-001
The user can access the file on
any node if the file has any of
these permissions
U, C, N
U, C, N
C, N
N
16 -14
Accessing Disk Files
Table 16-4.