SAS Scalable Performance Data Server 4.5, Administrator'S Manual

Page: 164 / 271

or member type at any point in a command sequence, and then continue with additional
ACL commands in the new scope.
SET ACLTYPE memtype;
Sets the member type for subsequent ACL operations. Valid values are DATA,
CATALOG, VIEW, and MDDB. The default is DATA.
SET ACLUSER [name];
Sets the SPD Server user scope for subsequent ACL operations. The user scope restricts
your view to only those ACL records which have the specified user name as the owner of
the ACL entry. If name is omitted, the default is the user who assigns the libref.
To actually perform an ACL operation on a resource entry, you must
• be the ACL entry owner, or
• have CONTROL access over the ACL entry, or
• have ACLSPECIAL=YES enabled on your PROC SPDO LIBNAME connection.
Note: You must first issue a SET ACLUSER command before issuing any of the following
ACL commands.
ADD ACL acl1 acl2... [C=cat T=type] [/options]
Creates new ACL entries acl1 acl2... where ACL entries acl1 acl2 ... can be one-part
resource names or two-part table column names.
Add ACL Options
READ
Grants universal READ access to the resource.
WRITE
Grants universal WRITE access to the resource.
ALTER
Grants universal ALTER access to the resource.
GROUPREAD
Grants group READ access to the resource.
GROUPWRITE
Grants group WRITE access to the resource.
GROUPALTER
Grants group ALTER access to the resource.
GENERIC
Specifies that acl1 acl2... are generic ACLs.
PERSIST
Specifies that acl1 acl2... are persistent ACLs.
LIBNAME
Identifies the special LIBNAME domain resource.
MODEL = acl-name
Specifies the name of another ACL. This option requests the software to copy all the
access permissions and access list entries from this ACL.
158
Chapter 14 • ACL Security Overview