ACL Types Supported by CDS

· Object ACL - You can use the Object ACL type to grant permissions to any CDS name (that is, object entries, soft links, child pointers, clearinghouses, and directories), as well as to CDS clerks and servers. When associated with a CDS directory, the permissions you grant with the Object ACL type apply only to the directory itself, not to the directory's contents or to any child directories.

· Initial Object Creation ACL - The Initial Object Creation ACL type applies only to CDS directory names. Use this ACL type to grant permissions specifically to a directory's future contents, including soft links, application-defined object entries, child pointers, and clearinghouse object entries. The permissions you grant by using the Initial Object Creation ACL type apply only to the future contents of the directory, not to the directory itself. The permissions are inherited only by names that are created in the directory after you create the ACL entry; permissions are not propagated to names that already exist in the directory.

To edit an Initial Object Creation ACL, you use the -io option of the dcecp program's acl modify command.

· Initial Container Creation ACL - The Initial Container Creation ACL type applies only to CDS directory names. Use this ACL type to grant permissions to a directory that automatically propagate (the default) to all child directories that you may later create under that directory. The permissions you grant by using the Initial Container Creation ACL type are inherited only by the child directories that you create after you create the ACL entry; permissions are not propagated to child directories that already exist.

To edit an Initial Container Creation ACL, you use the -ic option of the dcecp program's acl modify command.