Controlling Access to the Hierarchical File System › HFS Control Using CA SAF HFS Security › Permission Considerations

Permission Considerations

This section describes special considerations to be taken into account when administering permits for HFS resources.

In addition to access to HFS files, users also need access to directories. A user requires READ access to a directory in order to list the contents of that directory. When writing a permission, distinguish a directory permit from a file permit by not using a trailing period in the HFSSEC authorization.

Example: HFS permission

This example allows users to read the /BIN directory but only allows EXECUTE access to the files contained within the directory:

TSS PER(ALL) HFSSEC(/BIN)
             ACCESS(READ)

TSS PER(ALL) HFSSEC(/BIN.)
             ACCESS(EXEC)