Controlling Access to the Hierarchical File System › Secure HFS Functions › Example: IBMFAC permissions

Example: IBMFAC permissions

This example allows Thelma to change the file mode and owner for all files. Louise is allowed to change the file mode for only those files that reside in a certain directory, but is not allowed to change the file owner in any file:

TSS PER(THELMA) IBMFAC(BPX.CAHFS.CHANGE.FILE.MODE)
                ACCESS(ALL)

TSS PER(LOUISE) IBMFAC(BPX.CAHFS.CHANGE.FILE.MODE)
                ACCESS(CONTROL)

TSS PER(THELMA) IBMFAC(BPX.CAHFS.CHANGE.FILE.OWNER)
                ACCESS(ALL)

TSS PER(LOUISE) HFSSEC(/certain.directory.)
                ACCESS(ALL)