Software Distributor Administration Guide (March 2009)

A sample host-system ACL grants depot and root source creation, source listing, and
ACL administration to a user named rob and give open permission to list the depots
and roots on the host, would be:
user:rob:r-ic-
any_other:r
Since any_other does not havet (test) permission, only rob can list this ACL, because
he has c (control permission).
9.5.3.2 Root ACLs
Principals (users) identified in ACLs that are protecting roots are granted permission
to manage installed products. The permissions associated with a root are:
Table 9-8 Root Permissions
Permission to install a new product.
i(insert)
Permission to list the contents of the root.
r(read)
Permission to delete the root itself or the products in the root.
w(write)
Permission to edit or change the ACL.
c(control)
Permission to test access to an object and list the ACL.
t (test)
A sample root ACL that grants a user named lois permission to read, write, and insert
software and members of the group named swadm all possible permissions is:
user:lois:rwi-
group:swadm:crwit
When a root is created, it is automatically protected by a default ACL derived from its
host. Use swacl to change the initial values of this ACL. For additional information,
see “ACL Templates ” (page 202).
9.5.3.3 Depot ACLs
Principals identified in ACLs that are protecting depots are users who have been granted
permission to manage the depot and to create new products. The permissions associated
with a depot are:
Table 9-9 Depot Permissions
Permission to copy a new product into the depot.
i(insert)
Permission to list the contents (products) of the depot source.
r (read)
Permission to delete the depot (if it is empty), and unregister itself (not the
products in the depot).
w (write)
Permission to edit or change the ACL.
c (control)
Permission to test access to an object and list the ACL.
t (test)
200 SD-UX Security