FTAM/9000 User's Guide

82 Chapter 5
FTAM File Protection
Using FTAM File Protection
To restrict access for others to read and read_attributes on the file
JuneData, enter the following command:
$ fcattr JuneData -i user,RPXEACD -i group,RPXEACD -i other,RA
The following examples illustrate correct use of the -z and –i option for
several different situations.
This allows the user and group members full access to the file, while
other users have only read and read attribute access. To delete the access
control for this file enter the following command:
$ fcattr JuneData -d other -d group -d user
Now, consider this case. First, access control is put on the file, using the
following command:
$ fcattr MarchData -i user,RPXEACD=XS -i group,RPXEACD=XS
This grants the user and all group members full permissions, and allows
a user to request either eXclusive or Shared access on any action.
Suppose two people want to copy MarchData to their own directories, but
one requests exclusive access during the copy and the other requests
shared access, which is the default access method. The first person
enters the following command to copy the file with shared access:
$ fcp /source/MarchData marchdata
A moment later, while the first copy is under way, the second person
enters the following command to copy the file with exclusive access:
$ fcp /source/MarchData -X MyMarchData
Because the first request was for shared access (the default), the second
person's request will fail; he can not get exclusive access at present. If
the order of the commands were reversed, the first person would be
allowed exclusive access, and the request for shared access would fail
due to the current exclusive user.
The next example uses the -z option to gain access to a file on the paris
host. The user requires read permission, which uses shared access and
has a password associated.
$ fcp henri@paris:datafile -z R=S.ReadPass,A=S.RattrPass
HenrisData
This example shows a user setting access control on a remote file that
she owns. Note that she retains all permissions, and gives group users
only read and read_attribute permission.
$ fcattr tokyo:memos/salesmemo -i user,RPXEACD -i group,RA