Filter
Top Products
Compaq FTAM Responder Support of
ISO FTAM Functions
OSI/FTAM Responder Manual—425199-001
4-20
Security Group File Attributes
•
If any of the insert, replace, extend, change-attribute, or erase access-control bits of
the action list are set, the responder sets WRITE access to N, indicating that any user
on the Expand network can write to the file.
•
If the delete-file access-control bit of the action list is set, the responder sets PURGE
access to N, indicating that any user on the Expand network can purge the file.
For delete-values:
•
If the read access-control bit of the action list is set, the responder sets READ access
to –, indicating that only the super ID user can read the file.
•
If all of the insert, replace, extend, change-attribute, or erase access-control bits of
the action list are set, the responder sets WRITE access to –, indicating that only the
super ID user can write to the file. If only some of these access-control bits are set,
there is no change.
•
If the delete-file access-control bit of the action list is set, the responder sets PURGE
access to –, indicating that only the super ID user can purge the file.
Reading File Attributes. When the Compaq responder reads FTAM file attributes for
document types other than NBS-9, it maps the values for access control from Guardian
security based on the user ID for the association, as defined by the initiator-identity
parameter sent in the F-INITIALIZE request or by the DEFUSER attribute specified in
the VFS profile configured for this responder. This mapping shows which actions that
user can perform. (For NBS-9 files, the action list on a read-attribute action is always
[read, read-attribute]).
The user has specific access (READ, WRITE, EXECUTE, or PURGE) to a file if one of
the following applies:
•
User is super ID, and file is on the same Expand node as the responder.
•
Guardian security is N.
•
Guardian security is A, and file is on the same Expand node as the responder.
•
Guardian security is C, and user is in the same group as the owner of the file.
•
Guardian security is G, and user is in the same group as the owner of the file, and
file is on the same Expand node as the responder.
•
Guardian security is U, and user is the owner of the file.
•
Guardian security is O, user is the owner of the file, and file is on the same Expand
node as the responder.
The Compaq responder sets the individual bits of the action list according to the
Guardian access allowed for the user. Table 4-14 shows how Guardian security maps to
FTAM action-list settings.
Note. EXECUTE access is always set to –, indicating that only the super ID user can execute
the file.