Using
Abbreviations
for
A
ttribute
Names
and
V
alues
T
o
remov
e
the
p ermissions
that
a
group
has
to
an
HPDPS
ob
ject,
use
the
follo wing
steps:
1.
If
y
ou
ha
v
e
not
already
done
so,
log
in
to
DCE
as
the
cell
administrator.
F
or
example,
if
the
cell
administrator
login
is
cell_admin
,
en
ter:
dce_login
cell_admin
When
prompted,
en
ter
the
cell
administrator
passw
ord.
2.
Use
the
acl_edit
command
to
remov
e
p ermissions
for
pd_operator
.
a.
Use
the
-e
ag
b ecause
y
ou
are
mo
difying
an
ob
ject
A
CL
rather
than
an
initial
ob
ject
or
initial
con
tainer
A
CL.
b.
Use
the
pdsec
soft
link.
c.
Use
the
-d
ag
to
delete
an
en
try
from
the
A
CL.
F
or
example,
en
ter:
acl_edit
-e
/.:/pdsec/Spool1
-d
group:pd_operator:
The
pd_operator
group
no
longer
has
an
y
p ermissions
to
the
sp o oler
Spool1 .
Use
this
same
command,
sp ecifying
the
dieren
t
ob
jects
individually
,
to
remov
e
the
pd_operator
group
p ermissions
from
the
A
CLs
of
an
y
ob
jects
con
tained
in
the
sp o oler.
F
or
example,
to
remov
e
a
group
from
the
p ermissions
granted
b
y
the
logical
prin
ter
LogPrt1 ,
whic
h
resides
in
Spool1 ,
sp ecify
/.:/pdsec/Spool1/printer/LogPrt1
in
y
our
acl_edit
command.
T
aking
Aw
ay
All
P
ermissions
That
any
other
and
unauthenticated
Ha
v
e
to
an
HPDPS
Object
T
o
remov
e
the
read
p ermission
granted
b
y
the
restricted
logical
prin
ter
LogPrt1Restrict
to
unauthenticated
and
any_other ,
use
the
following
steps:
1.
If
y
ou
ha
v
e
not
already
done
so,
log
in
to
DCE
as
the
cell
administrator.
F
or
example,
if
the
cell
administrator
DCE
login
is
cell_admin ,
en
ter:
dce_login
cell_admin
When
prompted,
en
ter
the
cell
administrator
passw
ord.
2.
Use
the
acl_edit
command
to
remov
e
p ermissions
for
unauthenticated .
a.
Use
the
-e
ag
b ecause
y
ou
are
mo
difying
an
ob
ject
A
CL
rather
than
an
initial
ob
ject
or
initial
con
tainer
A
CL.
Managing
DCE
Security
for
HPDPS
8-21