![HP Guardian Скачать руководство пользователя страница 339](http://html.mh-extra.com/html/hp/guardian/guardian_user-manual_165061339.webp)
Managing Users and Security
Guardian User’s Guide — 425266-001
16 -17
Controlled Access With Program File ID Adoption
Controlled Access With Program File ID Adoption
In any application, some data files might require a controlled type of access—such as
letting many users access certain records, while denying access to other records that are
considered sensitive. For example, an employee file might contain such data as
employees’ identification numbers, names and addresses, and sensitive information such
as salaries. This data might be in a record format as shown in
Figure 16-3
.
This example shows how a user can control the access to such a data file and also
control any future file accesses or program functions.
An employee data file is owned by user 1,112 and is secured for local owner access only
(OOOO). This means that only the file owner (or the local super ID) has direct access to
the file. However, a controlled form of file access is allowed using a query program that
has been written to return only nonsensitive information. The program file is owned by
user 1,112 and is secured so that any local user can execute the process (OOAO).
Additionally, program file ID adoption has been specified (use owner ID as process
access ID).
As shown in
Figure 16-4
, user 8,10 (process access ID of 8,10) executes the query
program, which returns “limited data views” only. The query process adopts the owner
ID of the program file (1,112), which becomes its process access ID. (If the query
program were to create another process, that process would inherit 1,112 as both its
creator access ID and its process access ID.)
Figure 16-2. Effect of Adopting the Owner ID of a Program File
Figure 16-3. Employee Record Format
013
CDT
.CDD
The program file's security
has been set to "use owner
ID as process access ID."
Process Access ID = 8,10
Creator Access ID = 8,10
Process Access ID = 1,112
Program File
for Process p1;
Owner ID = 1,112
Creator Access ID = 1,112
Process Access ID = 1,112
(CI)
(p1)
(p2)
014
CDT
.CDD
emp name
address
benefits
salary
.....etc.
emp #
Содержание Guardian
Страница 24: ...About This Guide Guardian User s Guide 425266 001 xxii Your Comments Invited ...
Страница 30: ...Part I Using the Compaq Tandem Advanced Command Language TACL Guardian User s Guide 425266 001 ...
Страница 100: ...Part II Managing Files Using the File Utility Program FUP Guardian User s Guide 425266 001 ...
Страница 146: ...Part III Managing Disk and Tape Processes Guardian User s Guide 425266 001 ...
Страница 232: ...Backing Up and Restoring Disk Information Guardian User s Guide 425266 001 11 26 Backcopy Examples ...
Страница 234: ...Part IV Using the Spooler and Its Utilities Guardian User s Guide 425266 001 ...
Страница 248: ...Introduction to the Spooler Guardian User s Guide 425266 001 12 14 Sending Output to a SPOOL DEFINE ...
Страница 300: ...Performing Routine Spooler Operations Using Spoolcom Guardian User s Guide 425266 001 14 38 Problem Solving Summary ...
Страница 322: ...Part V Security Features and Other Guardian Utilities Guardian User s Guide 425266 001 ...
Страница 368: ...Monitoring Event Messages Guardian User s Guide 425266 001 17 14 Using the Event Viewer ...
Страница 378: ...Displaying Version and System Information Guardian User s Guide 425266 001 18 10 Task 2 Interpret SYSINFO Output ...
Страница 410: ...Monitoring Hardware Components Guardian User s Guide 425266 001 19 32 Automating System Monitoring ...
Страница 460: ...Index Guardian User s Guide 425266 001 Index 24 Special Characters ...