Security access control list definition
In the role-based security model, an access control list assigns security roles to users or groups, in a certain security domain. You can include multiple security access control list definitions in the same text file, along with security domain definitions and security role definitions.
Each security access control list definition has the following format and arguments:
Syntax
accesscontrollist for security_domain_name
user_or_group_name [security_role[, security_role]...]
[user_or_group_name [security_role[, security_role]...]]...
end
[securitydomain ...]
[securityrole ...]
Arguments
- security_domain_name
- Specifies the name of the security domain on which you are defining the access control list.
- user_or_group_name [security_role[, security_role]
- Assigns one or more security roles to a certain user or group, on the specified security domain.
Examples
The following example defines
an access control list on SECDOM1 domain and an access
control list on SECDOM2 domain:
ACCESSCONTROLLIST FOR SECDOM1
USER1 SECROLE1, SECROLE2, SECROLE3
USER2 SECROLE4
USER3 SECROLE2, SECROLE4
END
ACCESSCONTROLLIST FOR SECDOM2
USER1 SECROLE1, SECROLE2
USER2 SECROLE3
END