Technical data

Using Files and Directories
10.5 Protecting Files
10.5.3.3 Modifying Disk File Protection Characteristics
Table 10–3 shows the DCL commands that you can use to establish and modify
the protection characteristics of files.
Table 10–3 DCL Commands to Modify File Protection Characteristics
Command Description For More Information
SET
DIRECTORY
Modifies the characteristics of one or more directories.
The directory protection can override the protection of
individual files within the directory.
See Section 10.5.4.
SET FILE Modifies the characteristics of one or more files, including
the version limits on files.
See Section 10.5.3.3.2.
SET
PROTECTION/DEFAULT
Sets the default UIC protection on files. Refer to the OpenVMS Guide
to System Security.
SET
SECURITY
Modifies the security profile of an object. Such a profile
contains the following characteristics:
• An access control list (ACL).
• A protection code, which defines access to objects
based on the categories of system, owner, group, and
world.
• An owner. The system uses the owner characteristic
to interpret the protection code.
Refer to the OpenVMS Guide
to System Security and the
OpenVMS DCL Dictionary.
SET VOLUME Changes the characteristics of one or more mounted Files-
11 volumes. The /FILE_PROTECTION qualifier sets the
default protection to be applied to all files on the specified
disk volume.
See Section 9.4.1.2.
For a complete list of the command qualifiers and parameters applicable to each
of these DCL commands, refer to the OpenVMS DCL Dictionary.
10.5.3.3.1 Changing File Protection Characteristics To change or reset the
protection characteristics of one or more files, use the following format:
SET SECURITY/PROTECTION = code file-spec[,...]
where:
code Defines the protection to be applied to the specified files. You cannot
omit the code.
file-spec Specifies one or more files for which the protection is to be changed. A
file name and file type are required. If you omit a version number, the
protection is changed only for the highest existing version of the file.
Wildcard characters are allowed.
The following examples show ways to change file protection.
Examples
1.
$ DELETE INCOME.DAT;3
%DELETE-W-FILNOTDEL, error deleting DISK1:[SMITH]INCOME.DAT;3
-RMS-E-PRV, insufficient privilege or file protection violation
$ SET SECURITY/PROTECTION=OWNER:D INCOME.DAT;3
$ DELETE INCOME.DAT;3
10–18 Using Files and Directories