Section 5 - File Formats, Data Descriptions, MIBs, and System Processes Reference

File Formats, Data Descriptions, MIBs, and System Processes Reference

T_ACLPERM Class Definition

Overview

The T_ACLPERM class indicates what groups are allowed to access BEA Tuxedo system entities. These entities are named via a string. The names currently represent service names, event names, and application queue names.

Attribute Table

Table 4 ACL_MIB(5): T_ACLPERM Class Definition: Attribute Table

Attribute	Type	Permissions	Values	Default
`TA_ACLNAME`(r)(*)	string	`rw-------`	`string`[1..30]	N/A
`TA_ACLTYPE`(r)(*)	string	`rw-------`	`"ENQ` \| `DEQ` \| `SERVICE` \| `POSTEVENT"`	N/A
`TA_ACLGROUPIDS`	string	`rw-------`	`string`	N/A
`TA_STATE`	string	`rw-------`	`GET:` `"INA"` `SET:` "{`NEW` \| `INV`}`"`	N/A N/A
`TA_STATE`	string	`rw-------`	`GET:` `"INA"` `SET:` "{`NEW` \| `INV`}`"`	N/A N/A
( r )—required field for object creation (`SET TA_STATE NEW`) ( * )—`GET/SET` key, one or more required for `SET` operations

Attribute Semantics

TA_ACLNAME: string

The name of the entity for which permissions are being granted. The name can represent a service name, an event name, and/or a queue name. An ACL name is a string of printable characters and cannot contain a colon, pound sign, or newline.

TA_ACLTYPE: ENQ | DEQ | SERVICE | POSTEVENT

The type of the entity for which permissions are being granted.

TA_ACLGROUPIDS: string

A comma-separated list of group identifiers (numbers) that are permitted access to the associated entity. The length of string is limited only by the amount of disk space on the machine.

TA_STATE:

GET: {VALid}

A GET operation will retrieve configuration information for the selected T_ACLPERM object(s). The following states indicate the meaning of a TA_STATE returned in response to a GET request.

VALid

T_ACLPERM object is defined and inactive. Note that this is the only valid state for this class. ACL permissions are never active.

SET: {NEW | INValid}

A SET operation will update configuration information for the selected T_ACLPERM object. The following states indicate the meaning of a TA_STATE set in a SET request. States not listed may not be set.

`NEW`	Create `T_ACLPERM` object for application. State change allowed only when in the `INValid` state. Successful return leaves the object in the `VALid` state.
`unset`	Modify an existing `T_ACLPERM` object. This combination is not allowed in the `INValid` state. Successful return leaves the object state unchanged.
`INValid`	Delete `T_ACLPERM` object for application. State change allowed only when in the `VALid` state. Successful return leaves the object in the `INValid` state.

Limitations

Permissions are defined at the group level, not on individual user identifiers.