PURPOSE

tpaclmod - modify an Access Control List on the system

SYNOPSIS

TUXCONFIG=tuxconfig tpaclmod [-g gid[,gid...]] [-t type] name

DESCRIPTION

Invoking tpaclmod modifies an Access Control List entry in the TUXEDO security data files, replacing the group identifier list. This information is used for TUXEDO System/T access control to services, events, and application queues. A TUXEDO configuration with SECURITY set to USER_AUTH, ACL, or MANDATORY_ACL must be created before running this command successfully.

The following options are available:

-g gid,...

A list of one or more existing group's integer identifiers or character-string names. This option indicates what groups have access to the named object. If not specified, the entry is modified to have no groups.

-t type

The type of the object. It can be one of "ENQ", "DEQ", "SERVICE", or "POSTEVENT". The default is "SERVICE".

name

An existing ACL name.

Before running this command, the application must be configured using either the graphical user interface or tmloadcf(1). tpaclmod must be be run on the configuration MASTER if the application is not active; if active, this command can run on any active node.

PORTABILITY

This command is available only on non-/WS sites running TUXEDO System/T Release 6.0 or later.

DIAGNOSTICS

The tpaclmod command exits with a return code of 0 upon successful completion.

SEE ALSO

tpacladd(1),


BEA TUXEDO Administrator's Guide