Shell Commands › User Management › user get_newobj_acl (User Management) Display New Object ACL Definition for a User or Principal

user get_newobj_acl (User Management) Display New Object ACL Definition for a User or Principal

Display the new object ACL definition associated to a user, or display that portion of the new object ACL definition which relates to a particular principal.

Syntax:

user get_newobj_acl <name> [ <principal> ] [--effective] [ --batch ]

Parameters:

<name>

Name of the user; prepend the user name with / to indicate a global user. If the user name is not supplied, information is returned for the user executing the command.

<principal>

Name of the principal. <principal> is in the following form:

<scope>:<type>:<name>

A fully qualified principal name where <scope> is 'global' or 'local', type is 'group' or 'user' and <name> is the group or user name.

--effective

Display the ACL which would be created if the user were to create a new object. This option takes in to account any relevant user or group new object ACL definitions.

--batch

Display output in UDL format

Example:

user get_newobj_acl user1

Get the new object ACL definition associated to the local user 'user1'.

Output Specification

The non-batch output of this command is as follows:

--- Owner Information ---
ID                                    Scope    Type    Name
-------------------------------------------------------------------------
<val>                                 <val>    <val>   <val>

--- Entry Information ---
ID                                    Scope    Type    Name            Access
------------------------------------------------------------------------------
<val>                                 <val>    <val>   <val>           <val>
...
<val>                                 <val>    <val>   <val>           <val>

The batch output of this command is as follows:

acl
   {
   owner       : id=<val>   # scope type name
   entries
      [
      id=<val>, access_level1, ... access_levelN, permission1, ... permissionN   # scope type name
      ...
      id=<val>, access_level1, ... access_levelN, permission1, ... permissionN   # scope type name
      ]
   }