PreviousNext

Registry Policy Interface (rs_policy) Operations

The rs_properties_get_info( ) operation returns a list of registry properties. The caller must have the r (read) permission on the policy object from which the property information is to be returned.

Event Type (Event Number, Event Classes)
PROP_GetInfo (0x11E, dce_sec_control, dce_sec_query)

Event-Specific Information
None

The rs_properties_set_info( ) operation sets the registry properties. The caller must have the m (mgmt_info) permission on the policy object for which the property information is to be set.

Event Type (Event Number, Event Classes)
PROP_SetInfo (0x11F, dce_sec_control, dce_sec_modify)

Event-Specific Information
None

The rs_policy_get_info( ) operation returns the policy for a specified organization or the registry (if no organization name is specified). The caller must have the r (read) permission on the policy object or organization item from which the data is to be returned. Note that the rs_policy_get_effective( ) operation uses the same audit event (POLICY_GetInfo) as the rs_policy_get_info( ) operation.

Event Type (Event Number, Event Classes)
POLICY_GetInfo (0x120, dce_sec_control, dce_sec_query)

Event-Specific Information
char *organization

The rs_policy_set_info( ) operation sets the policy for a specified organization or the registry (if no organization name is specified). The caller must have the m (mgmt_info) permission on the policy object or organization item for which the data is to be set.

Event Type (Event Number, Event Classes)
POLICY_SetInfo (0x121, dce_sec_control, dce_sec_modify)

Event-Specific Information
char *organization

The rs_auth_policy_get_info( ) operation returns the authentication policy for a specified account or the registry (if no account is specified). The caller must have the r (read) permission on the policy object or accounts principal from which the data is to be returned.

Event Type (Event Number, Event Classes)
AUTHPOLICY_GetInfo (0x122, dce_sec_control, dce_sec_query)

Event-Specific Information
char *account

The rs_auth_policy_get_effective( ) operation returns the effective authentication policy for an account. If no account is specified, the authentication policy for the registry is returned. The caller must have the r (read) permission on the policy object of the registry. If an account is specified, the caller must also have r (read) permission on the accounts principal.

Event Type (Event Number, Event Classes)
No new event is defined for this operation. AUTHPOLICY_GetInfo is used here.

The rs_auth_policy_set_info( ) operation sets the authentication policy for an account or the registry (if no account is specified). The caller must have the a (auth_info) permission on the accounts principal or policy object of the registry.

Event Type (Event Number, Event Classes)
AUTHPOLICY_SetInfo (0x123, dce_sec_control, dce_sec_modify)

Event-Specific Information
char *account