Order of object definition
You must order object definitions from most specific to least specific,
in the same way as for user attributes. For example,
- Incorrect
-
In this case, a job with the name beginning with "ar" would satisfy the first definition, and so would be given the display access, not all access.job name=@ access=display job name=ar@ access=@ - Correct
-
job name=ar@ access=@ job name=@ access=display
Ensure that you order object definitions from most specific to least specific also when you use the Continue keyword.
The Continue keyword allows a user to inherit authorization from multiple stanzas. The user receives accesses as defined in the first matching entry of each stanza that matches the user definition. For an example of a security file with the Continue keyword, see Users logged into multiple groups [continue keyword]