Previous Topic: SESSION ClassNext Topic: USER Class


SHARE Class

Each record in the SHARE class defines a share resource that could be any device, data, or program used by one or more devices or programs. For Windows, shared resources refer to any resource that is made available to network users, such as directories, files, printers, and named pipes. A share also refers to a resource on a server that is available to network users.

The key of the SHARE class record is the share name of the resource.

The following definitions describe the properties contained in this class record. Most properties are modifiable and can be manipulated using selang or the administration interfaces. Non-modifiable properties are marked informational.

CURR_USERS

(Informational). The number of current connections to the resource.

DACL

Defines the standard access control list that contains the user names and group names authorized to access the resource, and the level of access granted to each.

Users who want to modify this property must be the owner of the resource or have special access to the resource (to modify the ACL).

Each element in the access control list contains the following information:

Access Type

Specifies permissions to the resource:

  • Allowed-Permits special access to the resource.
  • Denied-Denies special access to the resource.
Accessor

The user or group for whom the access rights are allowed or denied.

Access

The access authority that the accessor has to the resource.

Note: In an empty ACL, no accesses are explicitly granted, so access is implicitly denied. For a resource that has no ACL, no protection is assigned to the object, so any access request is granted.

Use auth or auth- command to modify this property.

MAX_USERS

The maximum number of concurrent connections that the shared resource can accommodate.

Note: You cannot supply zero (0) as a value for this property. Windows ignores it.

Use the max_users parameter with the newres, chres, or editres commands to modify this property.

NAME

Defines the name of the share.

PATH

A string that specifies a local path for the shared resource. For disks, this is the path being shared. For print queues, this is the name of the print queue being shared.

Use the path parameter with the newres, chres, or editres commands to modify this property.

PERMISSION

(Informational). A value that indicates the shared resource's permissions for servers running with share-level security. This property can be any of the values in the following table:

ACCESS_READ

Permission to read data from a resource and, by default, to execute the resource.

ACCESS_WRITE

Permission to write data to the resource.

ACCESS_CREATE

Permission to create an instance of the resource (such as a file); data can be written to the resource as the resource is created.

ACCESS_EXEC

Permission to execute the resource.

ACCESS_DELETE

Permission to delete the resource.

ACCESS_ATRIB

Permission to modify the resource's attributes (such as the date and time when a file was last modified).

ACCESS_PERM

Permission to modify the permissions (read, write, create, execute, and delete) assigned to a resource for a user or application.

ACCESS_ALL

Permission to read, write, create, execute, and delete resources, and to modify their attributes and permissions.

ACCESS_NONE

Denies permissions.

REMARK

Additional information you want to include in the record. The alphanumeric string can contain up to 255 characters. CA ControlMinder does not use this information for authorization.

Use the comment or comment- parameter with the newres, chres, or editres commands to modify this property.

RESOURCES

(Informational). A property that gives information about shared files on a server. This information includes the path of the opened shared resource and the user or computer that opened the resource.

TYPE

(Informational). The type of share. Use one of the following types for a shared resource:

File Folder

A disk drive. This can also refer to remote administration of the server (ADMIN$) and to administrative shares such as C$, D$, and so on.

Print Queue

A print queue

Communication device

A communication device

Interprocess Communication (IPC)

A special share reserved for interprocess communication (IPC$)

USERS

Information about users currently accessing the shared resource. This information includes the name of user who made the connection (USER), the share name of the server's shared resource, or the computer name of the client (MACHINE). It also includes the number of seconds that the connection has been established (TIME) and the number of files currently open as a result of the connection (INUSE).