Endpoint Administration Guide for UNIX › Managing Authorization › Interaction Between User and Group Access Authorities › Accumulative Group Rights (ACCGRR)

Previous Topic: Interaction Between User and Group Access Authorities

Next Topic: Security Levels, Categories, and Labels

Accumulative Group Rights (ACCGRR)

The accumulative group rights option (ACCGRR) affects how CA Access Control checks a resource's ACL. If ACCGRR is enabled, CA Access Control checks the ACL for the authorities granted from all the groups to which the user belongs. If ACCGRR is disabled, CA Access Control checks the ACL to see if any of the applicable entries contain the value none. If so, access is denied. Otherwise CA Access Control ignores all group entries except the first applicable one in the access control list. By default the option is enabled.

To enable the ACCGRR option, you can use the following selang command:

setoptions accgrr

To disable the ACCGRR option, you can use the following selang command:

setoptions accgrr‑