Establishing Group Security [ System Administrator's Quick Reference Guide ] MPE/iX 5.0 Documentation
System Administrator's Quick Reference Guide
Establishing Group Security
Establishing group security and controlling access to groups and group
files requires:
* Assigning a group password.
* Defining group capabilities.
* Defining file access restrictions.
Users with account manager (AM) capability can specify group permissions
and restrictions when a group is created or modified.
Defining Group Passwords
The syntax for defining a group password for a new group is:
NEWGROUP groupname[.accountname];PASS=password
The syntax for changing the password for an existing group is:
ALTGROUP groupname[.accountname];PASS=password
The default for group password is no password.
Adding Group Capabilities
The syntax for adding additional capabilities to the group is:
ALTGROUP groupname.accountname;CAP=attribute,attribute,...
The defaults for group capabilities are interactive access (IA) and batch
access (BA) provided the account also has them.
Restricting Group Capabilities
The syntax for restricting group capabilities is:
ALTGROUP groupname.accountname;CAP=attribute,attribute,...
where the allowed attributes are IA, BA, PH, MR, DS, and PM.
Permitting Unlimited Group File Access to Nonmembers
The syntax for permitting unlimited group file access for a new group to
nongroup members is:
NEWGROUP groupname.accountname;ACCESS=(R,W,L,A,X,S:ANY)
The syntax for permitting unlimited group file access for an existing
group to nongroup members is:
ALTGROUP groupname;ACCESS=(R,W,L,A,X,S:ANY)
With the exception of the PUB account, the default condition for group
file access allows all group members (GU) unrestricted access.
Permitting Limited Group File Access to Nonmembers
The syntax for permitting limited file access to nongroup members is:
ALTGROUP groupname.accountname;ACCESS=(attribute,attribute:ANY;attribute,attribute...:GU)
MPE/iX 5.0 Documentation