Content-type: text/html Manpage of cmacl

cmacl

Section: User Commands (1)
Updated: SnapshotCM
Index Return to Main Contents

 

NAME

cmacl - list and edit SnapshotCM Access Control Lists (ACLs)  

SYNOPSIS

cmacl [options] [-eaclPattern] [path ...]

 

DESCRIPTION

cmacl lists and edits SnapshotCM access control lists (ACLs). Specify the type of ACL to display with one of the -A (server administration ACL), -C (account ACL), -P path ... (project or snapshot path), or -F path ... (file path) options.

Only one type of ACL can be operated upon at a time, though multiple snapshot or file ACLs can be displayed or edited with one command.

Use the -e aclPattern option to edit an ACL. Use the -r option with the -e option to set an ACL to an explicit value (rather than editing the previous value).

 

AclPattern

The aclPattern specification is as follows:

aclPattern = <acctEdit>[,<acctEdit>][,...]
acctEdit = ["+" | "-" | "="]<account>[<bitEdit>...]
account = u:<name> | g:<name> | <name>
bitEdit = +[<bits>] | -[<bits>] | =[<bits>]
bits = [vmpcdrwb]...
name = user or group account name (g: or u: forces type)

The account name can begin with a g: or u: to signify the type of account. If omitted, a user account will be looked for first. If no user account of that name exists, then a group account will be looked for. If no user or group account of that name exists, an error will be reported.

The account name can be preceded by a plus, minus, equals or nothing, all of which have different meaning. A plus says to add the account entry to the ACL if not present. If an entry for that account already exists in the ACL, the edit pattern is ignored and no action is taken.

A minus says to remove any entry for the specified account from the ACL.

An equals says to edit any existing entry for the specified account. If no entry for the specified account exists, the ACL is not modified.

If none of these symbols precedes the account name, then the account entry is added to the ACL if not present, and edited if already present.

 

Permissions

The permission bits can be specified in lower or upper case and may be preceded by a plus, minus, or equals. A plus means to incrementally add the bits to the account entry, a minus means to incrementally remove the bits from the account entry, and an equals means to absolutely set the bits for the account as specified.

The bits have the following meanings:

v
View or traverse projects and snapshots; view accounts (Administration, Project/Snapshot, Account).

m
Modify project, snapshot or accounts (Administration, Project/Snapshot, Account).

p
Edit ACL permissions (All).

c
Create child projects/snapshots (Administration, Project/Snapshot).

d
Delete projects, snapshots or accounts (Administration, Project/Snapshot, Account).

r
Read files in snapshot. (Administration, Project/Snapshot, File).

w
Write, create, delete files in snapshot (Administration, Project/Snapshot, File).

b
Allow backup access (Administration ACL).

 

Options

-A
Operate on the Administration ACL.

-C
Operate on the Account ACL.

-F
Operate on the specified File ACLs. The snapshot through which to operate must be specified with the -Spath option.

-P
Operate on the specified Project, Project Folder or Snapshot ACLs.

-eaclEditPattern
Specify how to edit the selected ACLs. If omitted, the selected ACLs will be printed in a format compatible with this option.

-hhost
Specify the server to access. The server on the current system is the default if omitted.

-q
Suppress normal output.

-r
Reset the ACL. All elements will be removed from the target ACL before the aclEditPattern is applied. Has no effect if the -e option is omitted.

-R
Operate recursively. Valid only with the -P option.

-Spath
Specify with -F to indicate the snapshot in which the file paths are valid.

-V
Print internal command version.

 

RETURN VALUE

Exit status is 0 if the operation succeeded, 1 if there was an error performing the operation, and 2 if there was a bad option or network error.  

EXAMPLES

To list the Administration ACL on server blue, enter:

cmacl -A -h blue

To remove the everyone group from the /Project ACL, enter:

cmacl -P -h blue -e-everyone /Project

To grant joe delete permissions on objects where he already has explicit permissions, enter:

cmacl -P -h blue -e=joe+D /Project

To set the ACL so michelle has all access, and everyone else has only view and read access:

cmacl -P -h blue -r -e michelle=VMPCDRW,everyone=vr /Project

To grant nathan all access on /file.txt and deny all other access, enter:

cmacl -F -h blue -r -e nathan=PRW -S /proj/Current /file.txt

 

SEE ALSO

cmaccount(1), cmadmin(1), cmconfig(1)

 

Index

NAME
SYNOPSIS
DESCRIPTION
AclPattern
Permissions
Options
RETURN VALUE
EXAMPLES
SEE ALSO
This document was created by man2html, using the manual pages.
Time: 22:22:17 GMT, March 22, 2010