Previous Next

ACL Manager Types

A separate ACL manager type manages the ACLs for each class of objects for which permissions are uniquely defined. The manager type defines the permissions for those objects whose ACLs it manages, which are the number of permissions, the meanings of the permissions, and the tokens that represent the permissions in user interfaces to ACL manipulation tools.

For example, for the purpose of access control, five classes of objects are defined in the registry database, and five ACL manager types manage the ACLs for the registry database objects (the five registry manager types run in a single security server process). Other DCE components implement their own manager types, and applications implement manager types for the objects that the applications protect.

Refer to the OSF DCE Administration Guide and the OSF DCE Command Reference for information about standard DCE ACL manager types and the permissions they implement. Refer to Part 1 and The Access Control List APIs in this guide for information about implementing ACL manager types for distributed applications.