A CDE action is started from the workspace by a user or a role. The action inherits the privileges assigned to the profile of that user or role. A CDE action is a set of instructions that work like application macros or APIs to automate desktop tasks such as running applications and opening data files. On a system configured with Trusted Extensions, applications are started from the workspace as CDE actions. Instructions on how to create a CDE action are provided in the Solaris Common Desktop Environment: Advanced User’s and System Administrator’s Guide.
When you create a CDE action, create an f.action, not an f.exec. An f.exec executes the program as superuser with all privileges.
The system administrator puts the CDE action into the appropriate profiles and assigns any necessary privileges to the CDE action. You must list the privileges that the program uses, indicate the labels at which the application is intended to run, and supply any required effective user or group IDs. The system administrator assigns privileges as well as effective user and group IDs to the CDE action in the profile.