Shell Commands › Group Management › group modify_newobj_acl (Group Management)--Modify New Object ACL Definition

group modify_newobj_acl (Group Management)--Modify New Object ACL Definition

Replace that portion of a new object ACL definition associated to a group which relates to the owner or a principal entry.

Syntax:

group modify_newobj_acl <name> [ <principal>=owner ] [ <principal1>=<val> ... <principalN>=<val> ] [ template=<principal> ] [ --test_only ]

Parameters:

<name>

Name of the group; prepend the group name with / to indicate a global group.

<principal>=owner

Set the owner attribute of the new object ACL definition to the specified principal. The principal must be a group.

<principal>=<val>

Add the specified principal to the new object ACL definition with access level <val>. <principal> is in the following form:

<name>

Local user or group.

/<name>

Global user or group.

<scope>:<type>:<name>

A fully qualified principal name where <scope> is 'global' or 'local', <type> is 'group' or 'user', and <name> is the group or user name. Valid access levels are: read, control, configure and full.

template=<principal>

Replace the principal entries of the new object ACL definition with those of the new object ACL definition associated to the specified principal.

--test_only

Do not replace the new object ACL definition but rather test if the operation can succeed.

Example:

group modify_newobj_acl admin local:group:admin=full

Modify the new object ACL definition associated to the local group 'admin'.

Note:

The owner of a new object ACL definition associated to a group must itself be a group.