SAS Scalable Performance Data Server 4.5, Руководство администратора

Страница: 161 / 271

2. If a resource is owned by the same ACL group as the accessor, the accessor gets the
resource's GROUP permissions.
3. If the resource is owned by a different ACL group than the accessor, the accessor gets
the resource's UNIVERSAL permissions.
To turn on LIBACLINHERIT permissions in your spdsserv.parm file, submit the
statement:
LIBACLINHERIT ; .
To turn off LIBACLINHERIT permissions in your spdsserv.parm file, submit the
statement::
NOLIBACLINHERIT ; .
You can also use your libnames.parm file to turn on LIBACLINHERIT permissions.
To turn on LIBACLINHERIT permissions in your libnames.parm file, submit the
statement:
LIBACLINHERIT=YES.
To turn off LIBACLINHERIT permissions in your libnames.parm file, submit the
statement::
LIBACLINHERIT=NO.
If the LIBACLINHERIT parameter file option is turned on, the ACL precedence of
permission checks changes. Turning on LIBACLINHERIT creates a LIBNAME ACL on
the specified LIBNAME domain. The LIBNAME ACL grants users rights to all resources
within the LIBNAME domain. When a LIBNAME ACL is created for a specified
LIBNAME domain, the ACL precedence of permission checks becomes:
1. Check user-specific permissions first. If defined, the accessor gets these permissions.
2. If a resource is owned by the same ACL group as the accessor, the accessor gets the
resource's GROUP permissions.
3. LIBNAME ACL permissions are used for domains where LIBACLINHERIT is turned
on.
4. If the resource is owned by a different ACL group than the accessor, the accessor gets
the resource's UNIVERSAL permissions.
ACL Concepts
ACL Groups
ACL groups are somewhat analogous to UNIX groups. Each SPD Server user ID can belong
to one or more ACL groups.
The SPD Server administrator can affiliate a given SPD Server user ID with up to five ACL
groups. When you connect to an SPD Server using a LIBNAME assignment, you assert a
specific ACL group using the ACLGRP= option.
The ACLGRP= value in your LIBNAME assignment must match one of the five groups
that the administrator defined for you. If you do not assert ACLGRP= in your LIBNAME
assignment, the SPD Server affiliates you with your default ACL group. (This is the first
group in the list of five.)
ACL Concepts
155