VMS Help DCE_SECURITY, API Routines, rdacl_replace *Conan The Librarian (sorry for the slow response - running on an old VAX) |
NAME rdacl_replace - Replaces an ACL SYNOPSIS #include <dce/rdaclif.h> void rdacl_replace( handle_t h, sec_acl_component_name_t component_name, uuid_t *manager_type, sec_acl_type_t sec_acl_type, sec_acl_list_t *sec_acl_list, error_status_t *status); PARAMETERS Input h A handle referring to the target object. component_name A character string containing the name of the target object. manager_type A pointer to the UUID identifying the type of the ACL manager in question. There may be more than one type of ACL manager protecting the object whose ACL is bound to the input handle. Use this parameter to distinguish them. Use sec_acl_get_manager_types() to acquire a list of the manager types protecting a given object. sec_acl_type The ACL type. The sec_acl_type_t data type distinguishes the various types of ACLs an object can possess for a given manager type. The possible values are as follows: + sec_acl_type_object + sec_acl_type_default_object + sec_acl_type_default_container sec_acl_list The new ACL to use for the target object. This is represented by a pointer to the sec_acl_list_t structure containing the complete Access Control List. An ACL contains a list of ACL entries, the UUID of the default cell where authentication takes place (foreign entries in the ACL contain the name of their parent cell), and the UUID of the ACL manager to interpret the list. Output status A pointer to the completion status. On successful completion, the routine returns error_status_ok. Otherwise, it returns an error. DESCRIPTION The rdacl_replace() routine replaces the ACL indicated by the input handle with the information in the sec_acl_list parameter. ACLs are thought of as immutable, and in order to modify them, an editing application must read an entire ACL (using the sec_acl_lookup() routine), modify it as needed, and replace it using this routine. NOTES This call is not intended to be used by application programs. The sec_acl Application Programming Interface (API) provides all the functionality necessary to use the ACL facility. This reference page is provided for programmers who wish to write an ACL manager. In order to write an ACL manager, a programmer must implement the entire rdacl interface. This network interface is called on the client side via the sec_acl local interface. Developers are responsible for implementing the server side of this interface. Test server code is included as a sample implementation. FILES SYS$COMMON:[DCE$LIBRARY]RDACLIF.IDL The idl file from which dce/rdaclif.h was derived. ERRORS sec_acl_unknown_manager_type The manager type selected is not an available option. error_status_ok The call was successful. RELATED INFORMATION Functions: sec_intro sec_acl_bind sec_acl_lookup
|