Command Functions › PERMIT Function—Permit Access to Resources › Duplicate Permissions › Equal Prefix Lengths

Equal Prefix Lengths

If CA Top Secret encounters two matching PERMITs with equal prefix lengths while searching a Security Record, the access determination is based on the following process:

• The first PERMIT containing a matching prefix is considered the current best match. If no other PERMITS in the Security Record contain a matching prefix, CA Top Secret will base its access decision on this PERMIT command function.
• If the PERMIT in above authorizes access, contains the ACCESS(NONE) restriction, or has the ACTION(DENY) attribute, CA Top Secret ignores all subsequent PERMITs that contain resource prefixes of equal length. CA Top Secret will, however, examine PERMITs containing matching prefixes of greater length.
• If the PERMIT found in the first step does not allow access, does not contain the ACCESS(NONE) restriction, or does not have the ACTION(DENY) attribute, then subsequent PERMITs of equal prefix lengths are searched.