Using
Abbreviations
for
A
ttribute
Names
and
V
alues
Eac
h
DCE
con
tainer
has
an
initial
ob
ject
(IO)
A
CL
and
an
initial
con
tainer
(IC)
A
CL.
Setting
the
initial
ob
ject
A
CL
and
the
initial
con
tainer
A
CL
of
a
con
tainer
aects
subsequen
tly
created
en
tries
within
the
con
tainer
in
this
w
a
y:
F
or
subsequen
tly
created
c
hild
en
tries
that
are
themselv
es
con
tainers:
The
paren
t
con
tainer
IC
A
CL
b ecomes
b oth
the
IC
A
CL
and
the
ob
ject
A
CL
of
the
c
hild
con
tainer.
Referring
to
Figure
8-1 ,
the
IC
A
CL
and
ob
ject
A
CL
of
Con
tainer
B
are
inherited
from
the
IC
A
CL
of
Con
tainer
A.
F
or
example,
the
IC
A
CL
and
the
ob
ject
A
CL
of
a
serv
er
are
inherited
from
the
IC
A
CL
of
the
/.:/pdsec
directory
.
The
paren
t
con
tainer
IO
A
CL
b ecomes
the
IO
A
CL
of
the
c
hild
con
tainer.
Referring
to
Figure
8-1,
the
IO
A
CL
of
Con
tainer
B
is
inherited
from
the
IO
A
CL
of
Con
tainer
A.
F
or
example,
the
IO
A
CL
of
a
server
en
try
and
a
printer
en
try
are
inherited
from
the
IO
A
CL
of
the
/.:/pdsec
directory
.
F
or
subsequen
tly
created
c
hild
en
tries
that
are
not
con
tainers:
The
paren
t
con
tainer
IO
A
CL
b ecomes
the
ob
ject
A
CL
of
the
c
hild
en
try
.
The
paren
t
con
tainer
IC
A
CL
has
no
eect.
Referring
to
Figure
8-1,
the
ob
ject
A
CL
of
ob
ject
b
is
inherited
from
the
IO
A
CL
of
Con
tainer
B.
F
or
example,
the
ob
ject
A
CL
for
a
logical
or
ph
ysical
prin
ter
is
inherited
from
the
IO
A
CL
of
the
printer
directory
of
the
serv
er
con
taining
that
prin
ter.
The
p ermissions
are
propagated
from
the
IO
A
CL
of
the
/.:/pdsec
directory
through
the
supervisor
and
printer
con
tainers.
Figure
8-2
illustrates
ho
w
DCE
p ermissions
are
used
b
y
HPDPS.
The
/.:/pdsec ,
Super203 ,
printer ,
log ,
and
other
en
tries
are
DCE
con
tainers.
Y
ou
might
think
of
them
as
branc
hes
of
a
tree.
The
en
try
for
the
sup ervisor
also
represen
ts
an
HPDPS
serv
er
ob
ject.
The
ob
ject
A
CL
of
the
sup ervisor
is
inherited
from
the
IC
A
CL
of
the
/.:/pdsec
branc
h;
this
ob
ject
A
CL
determines
the
DCE
p ermissions
for
the
sup ervisor
ob
ject.
Managing
DCE
Security
for
HPDPS
8-13