Reference Information › Command Line Shell Reference Guide › Using Role Based Access Control › Managing Access to Objects

Managing Access to Objects

Several types of grid objects have an associated Access Control List (ACL). An object ACL contains a list of user or group IDs and the access level provided to each user or group. Access levels are named collections of individual access permissions.

The following are three types of objects in CA AppLogic® that have an ACL. Use the corresponding commands to modify or replace the ACL of an object as needed.

• Applications (application modify_acl or application put_acl)
• Global Catalogs (catalog modify_acl or catalog put_acl)
• Grid (grid modify_acl or grid put_acl)

Each of these objects has an associated set of possible access levels. While RBAC might be better described as a discretionary access control system, it does support roles in the sense that each access level grants permissions that correspond to a type of role. For example, the grid object has an access level named app_developer that provides permissions on the grid to perform actions such as creating catalogs or applications.