OS/2 Shareware BBS: 8 Other/08-Other.zip/acm.zip/ACM_HLP.HLP

OS/2 Help File | 1996-02-20 | 39KB | 1,540 lines

ΓòÉΓòÉΓòÉ 1. Help for the Access Control Manager ΓòÉΓòÉΓòÉ

The Access Control Manager provides both administrators and users the ability
to manage access control rules on servers in the network.

Users can use the Access Control Manager to:

o Select a server to manage.

o Scan drives and devices for profiles.

o Edit profiles from a tree view.

o Find lists of profiles to manage as a group.

o Exit the application.


ΓòÉΓòÉΓòÉ 1.1. Selecting a Server ΓòÉΓòÉΓòÉ

There are two ways to display the Select a Server window:

o Select the Options menu bar item and then the Select server menu item.

o Display the Context menu (mouse button 2) and then select the Select server
  menu item.

You can also select a server to manage when you start the Access Control
Manager from an OS/2 window.  Simply type the name of the server after the
command to start the Access Control Manager program. For example:

ACM SERVER1


ΓòÉΓòÉΓòÉ 1.2. Scanning for Profiles ΓòÉΓòÉΓòÉ

To scan a drive, directory, or device for profiles:

 1. Select the drive, directory, or device you want to scan.

 2. Select the Scan menu item from the Menu Bar.

 3. Select the Descendent menu item from the displayed Scan menu.

The Scan menu item is also available on the Context menu.


ΓòÉΓòÉΓòÉ 1.3. Finding a List of Profiles ΓòÉΓòÉΓòÉ

There are two ways to find a list of profiles to manage:

o Select the Find menu bar item and then any of the choices in that menu.

o Display the Context menu (mouse button 2) and then select the Find menu item.


ΓòÉΓòÉΓòÉ 1.4. Editing a Profile ΓòÉΓòÉΓòÉ

To display a profile to edit:

 1. Scan the drive or device that contains the profile.

 2. Open the tree to display the profile.

There are three ways to edit a profile once it is displayed:

o Select (double-click) the profile icon.

o Move the cursor to the profile icon, and select Edit from the Manage menu
  item.

o Display the Context menu for the profile icon, and select the Edit menu item.

In all three cases, the Add/Edit window is displayed, which will allow you to
edit the permissions in the profile.


ΓòÉΓòÉΓòÉ 1.5. Exiting the Access Control Manager ΓòÉΓòÉΓòÉ

There are three ways to exit the Access Control Manager.

o Select the Exit menu item from the Manage menu.

o Select the Exit menu item from the Context menu.

o Select the Close menu item from the System menu.


ΓòÉΓòÉΓòÉ 1.6. Main Window Controls ΓòÉΓòÉΓòÉ

The Main window contains the following controls:

o Profile container

o Menu bar

o Context menu


ΓòÉΓòÉΓòÉ 1.6.1. The Profile Container ΓòÉΓòÉΓòÉ

The profile container provides a tree view of the profiles on a server.

You can expand a point of the tree by selecting the + characters.

You can edit any profile by selecting it (double-click).

The existance of a profile is indicated by a lock icon or a lock with a device
icon.  In the case of drives and directories, a folder without a lock is used
to indicate the existance of a directory without a profile.

Root icons are always shown.  There are four types of root icons:

o Drives
o Printers
o Serial devices
o Pipes

If a root icon includes a lock, a profile exists for that root device. Root
profiles apply to all data and devices of that type.  For example, a profile on
C-drive applies to all files and directories on the C-drive that do not have
their own profile.  Putting a profile on the root of a drive or device is the
easiest way to specify the same access permissions for all data or devices of
that type.


ΓòÉΓòÉΓòÉ 1.6.2. The Menu Bar ΓòÉΓòÉΓòÉ

The menu bar contains the follow menu bar items:

o Manage
o Find
o Options
o Help


ΓòÉΓòÉΓòÉ 1.6.3. Context Menu ΓòÉΓòÉΓòÉ

A context menu can be displayed by depressing mouse button 2. Context menus
contain the following menu items:

o Add
o Edit
o Delete
o Refresh now
o Help
o Select server
o Macros
o Find
o Scan
o Exit


ΓòÉΓòÉΓòÉ 2. Select a Server Window ΓòÉΓòÉΓòÉ

There are three ways to select a server to manage:

o Type the server name.

o Find the server.

o Select the local server workstation.


ΓòÉΓòÉΓòÉ 2.1. Typing the server name ΓòÉΓòÉΓòÉ

To select a server to manage by typing in its name:

 1. Type the server name into the Server name entry field.

 2. Select OK.


ΓòÉΓòÉΓòÉ 2.2. Finding a Server ΓòÉΓòÉΓòÉ

To find a server to manage:

 1. Select the Find push button.

 2. Select a server using the Find Domain window.

 3. Select OK.


ΓòÉΓòÉΓòÉ 2.3. Selecting the Local Server Workstation ΓòÉΓòÉΓòÉ

To select the local server workstation to manage:

 1. Select the Local Server check box.

 2. Select OK.


ΓòÉΓòÉΓòÉ 2.4. Select a Server Window Controls ΓòÉΓòÉΓòÉ

The following controls appear on the Select a Server window:

o Server name entry field
o Find push button
o Local server check box
o OK push button
o Cancel push button
o Help push button


ΓòÉΓòÉΓòÉ 2.4.1. Server Name Entry Field ΓòÉΓòÉΓòÉ

To specify the server you want to manage, type its name in this field, and then
select OK.

You can also use the Find push button to help you specify a server.


ΓòÉΓòÉΓòÉ 2.4.2. Find Push Button ΓòÉΓòÉΓòÉ

Select this push button to display a list of domains and servers in your
network.


ΓòÉΓòÉΓòÉ 2.4.3. Local Server Check Box ΓòÉΓòÉΓòÉ

If the local workstation is a server and you wish to manage its access control,
select this check box and then select OK.

This check box will only be available if the local workstation is a server.


ΓòÉΓòÉΓòÉ 2.4.4. OK Push Button ΓòÉΓòÉΓòÉ

Select this push button when you are ready to display and manage the Access
Control Profiles on the server you have specified.

The new profile information display will replace the previously displayed
information.


ΓòÉΓòÉΓòÉ 2.4.5. Cancel Push button ΓòÉΓòÉΓòÉ

Select this push button if you do not want to display Access Control Profiles
from a newly selected server at this time.


ΓòÉΓòÉΓòÉ 2.4.6. Help Push button ΓòÉΓòÉΓòÉ

Select this push button to display help on the Select a Server window.


ΓòÉΓòÉΓòÉ 3. Find Domains Window ΓòÉΓòÉΓòÉ

The Find Domains window allows you to select a domain or server from list of
domains and servers.

This Find Domains window gives you the following capabilities:

o Selecting a domain or server

o Returning the selected domain or server to the parent window

o Canceling without returning a domain or server


ΓòÉΓòÉΓòÉ 3.1. Selecting a Domain or Server ΓòÉΓòÉΓòÉ

The Domains and Server container displays the domains and servers that the
Access Control Manager located on the network.  Use your mouse or keyboard to
select the desired object.

The parent window determines what type of object, a domain or a server, needs
to be returned.  If you select a domain and the parent window requires a
server, you will receive a message requesting you to select a server.


ΓòÉΓòÉΓòÉ 3.2. Returning the Selected Domain or Server ΓòÉΓòÉΓòÉ

To return the selected domain or server to the parent window:

 1. Select the domain or server in the Domains and Servers Container.

 2. Select OK.


ΓòÉΓòÉΓòÉ 3.3. Canceling the Find Domains Window ΓòÉΓòÉΓòÉ

If you want to return without returning a domain or server, select the Cancel
push button.


ΓòÉΓòÉΓòÉ 3.4. Find Domains Window Controls ΓòÉΓòÉΓòÉ

The Find Domains window contains the following controls:

o Domains and Servers container
o OK push button
o Cancel push button
o Help push button


ΓòÉΓòÉΓòÉ 3.4.1. Domains and Servers Container ΓòÉΓòÉΓòÉ

This container displays the domains located on the network. Four types of
domains are displayed:

o Your logon domain
o Your workstation domain
o Your workstation's other domains
o Domains listed in the LSTK.INI file


ΓòÉΓòÉΓòÉ 3.4.2. OK Push button ΓòÉΓòÉΓòÉ

Select this push button to send the selected domain or server in the Domains
and Servers container to the parent window.


ΓòÉΓòÉΓòÉ 3.4.3. Cancel Push button ΓòÉΓòÉΓòÉ

Select this push button if you want to return to the previous panel without
returning the selected object.


ΓòÉΓòÉΓòÉ 3.4.4. Help Push button ΓòÉΓòÉΓòÉ

Select this push button to obtain help for the Find Domain window.


ΓòÉΓòÉΓòÉ 4. Adding or Editing a Profile ΓòÉΓòÉΓòÉ

The Access Control Manager presents the same panel for either adding or editing
an Access Control Profile. This panel allows you to set the access permissions
you require for any resource, through the following operations:

o Change the permissions for the resource.

o Add or remove users and groups from the profile.

o Save the changes to the permissions.

o Restore the original permissions.

o Cancel any permissions changes.


ΓòÉΓòÉΓòÉ 4.1. Changing Permissions ΓòÉΓòÉΓòÉ

To change permissions, select one or more IDs in the Permissions container, and
then a change function.

There are four functions provided to assist you in changing permissions:

o None push button

o Set push button

o Grant push button

o Revoke push button


ΓòÉΓòÉΓòÉ 4.2. Adding or Removing IDs ΓòÉΓòÉΓòÉ

To add one or more IDs, select the Add IDs push button.

To remove one or more IDs, select the IDs to remove from the Permissions
container and then select the Remove IDs push button.


ΓòÉΓòÉΓòÉ 4.3. Saving the Permissions Changes ΓòÉΓòÉΓòÉ

Changes you make on the Add/Edit window are not saved automatically as you make
them.

To replace the original permissions in the profile with the new permissions in
the Permissions container, select OK.


ΓòÉΓòÉΓòÉ 4.4. Restoring the Original Permissions ΓòÉΓòÉΓòÉ

Because the changes you make on the Add/Edit window are not saved automatically
as you make them, you can return at any time to the original permissions
settings.

To restore the original permissions for the profile and display them in the
Permissions container, select the Undo push button.

Any changes you made are lost when the original settings are restored.


ΓòÉΓòÉΓòÉ 4.5. Canceling any Changes ΓòÉΓòÉΓòÉ

If you want to return without making any permissions changes, select the Cancel
push button.


ΓòÉΓòÉΓòÉ 4.6. Add/Edit Window Controls ΓòÉΓòÉΓòÉ

The Add/Edit window contains the following controls:

o Profile name entry field
o Permissions container
o None push button
o Permissions list box
o Set push button
o Grant push button
o Revoke push button
o Add IDs push button
o Remove IDs push button
o OK push button
o Cancel push button
o Help push button
o Undo push button


ΓòÉΓòÉΓòÉ 4.6.1. Resource Name Entry Field ΓòÉΓòÉΓòÉ

This entry field contains the resource name of the profile being added or
edited.

If you are adding a profile, type the name of resource you want to protect with
the new profile.

If you are editing a profile, this field contains the name of the profile you
selected to edit.


ΓòÉΓòÉΓòÉ 4.6.2. None Push button ΓòÉΓòÉΓòÉ

This push button sets the permission of the selected users in the Permissions
container to None.

To set the None permission:

 1. Select the users you want to change.

 2. Select the None push button.


ΓòÉΓòÉΓòÉ 4.6.3. Help Push button ΓòÉΓòÉΓòÉ

This push button displays help for the Add/Edit Profile window.


ΓòÉΓòÉΓòÉ 4.6.4. Revoke Push button ΓòÉΓòÉΓòÉ

This push button revokes the selected permissions in the Permissions list box
from the selected users in the Permissions container.

To revoke permissions:

 1. Select the users whose permissions you want to change.

 2. Select the permissions you want to revoke from the Permissions list box.

 3. Select the Revoke push button.

The selected permissions are the only permissions revoked; any other
permissions remain unchanged. If the result of the revoke action leaves a user
with no permissions, the permission for that user is set to None.


ΓòÉΓòÉΓòÉ 4.6.5. Grant Push button ΓòÉΓòÉΓòÉ

This push button grants the selected permissions in the Permissions list box to
the selected users in the Permissions container.

To grant permissions:

 1. Select the users whose permissions you want to change.

 2. Select the permissions you want to grant from the Permissions list box.

 3. Select the Grant push button.

The selected permissions are the only permissions granted; any other
permissions remain unchanged.


ΓòÉΓòÉΓòÉ 4.6.6. Permissions List box ΓòÉΓòÉΓòÉ

This list box contains a list of access permissions that can be selected to
perform the Set, Grant, or Revoke functions.


ΓòÉΓòÉΓòÉ 4.6.7. Undo Push button ΓòÉΓòÉΓòÉ

This push button resets the permissions back to the state that was displayed
when the Add/Edit window was first displayed for this resource.


ΓòÉΓòÉΓòÉ 4.6.8. OK Push button ΓòÉΓòÉΓòÉ

This push button commits the permissions displayed in the Permissions container
to the access control database and returns you to previous window.

The previous permission settings are replaced.


ΓòÉΓòÉΓòÉ 4.6.9. Cancel Push button ΓòÉΓòÉΓòÉ

This push button returns you to the previous window without affecting the
selected profile.


ΓòÉΓòÉΓòÉ 4.6.10. Remove IDs Push button ΓòÉΓòÉΓòÉ

This push button removes the selected IDs from the Permissions container.

To remove IDs:

 1. Select the IDs you want to remove.

 2. Select the Remove IDs push button.


ΓòÉΓòÉΓòÉ 4.6.11. Add IDs Push button ΓòÉΓòÉΓòÉ

This push button displays a panel containing the defined IDs on the server
being managed so that you can select a list of IDs to be added to the profile.


ΓòÉΓòÉΓòÉ 4.6.12. Permissions Container ΓòÉΓòÉΓòÉ

This container initially contains the permissions stored in the selected
profile.

Use the other controls on the Add/Edit window to set the new permissions for
this resource.

When you select OK, the permissions in this container are written to the
profile.

Changes you make in this container are not written to the profile until you
select OK.


ΓòÉΓòÉΓòÉ 4.6.13. Set Push button ΓòÉΓòÉΓòÉ

This push button sets the permissions for the selected users to the permissions
selected in the Permissions list box.

To set permissions:

 1. Select the users whose permissions you want to change.

 2. Select the permissions you want to set from the Permissions List box.

 3. Select the Set push button.


ΓòÉΓòÉΓòÉ 5. Find Profiles Window ΓòÉΓòÉΓòÉ

The Find Profiles window contains a list of the profiles you requested using
the find menu.

The Find Profiles window consists of the following controls:

o Menu bar
o Profiles list

You can manage any combination of the profiles listed on the Find window.

To manage profiles on the Find window:

 1. Select the profiles you want to manage.

 2. Select a menu item from the Find window menu bar.


ΓòÉΓòÉΓòÉ 5.1. The Find Profiles Window Menu Bar ΓòÉΓòÉΓòÉ

The Find Profiles window menu bar contains the follow menu bar items:

o Manage

o Select

o Help


ΓòÉΓòÉΓòÉ 6. Cloning Profiles ΓòÉΓòÉΓòÉ

The Clone Access Control Profiles window takes a list of profiles and makes the
permissions all the same.

You can perform the following functions on the Clone Profiles window:

o Choose a profile as the permissions template.

o Change the template permissions.

o Add or remove users and groups from the template permissions.

o Set permissions in all the profiles to the template permissions.

o Restore the original template permissions.

o Cancel any permissions changes.


ΓòÉΓòÉΓòÉ 6.1. Choosing a Permissions Template ΓòÉΓòÉΓòÉ

The profiles you have chosen to clone are contained in the Profiles list. The
permissions originally displayed in the Permissions Template container are the
permissions from the currently selected profile.

To select a Permissions Template, select a profile in the Profiles list.

You should select a permissions template that most closely matches the
permissions you want to clone.


ΓòÉΓòÉΓòÉ 6.2. Changing the Template Permissions ΓòÉΓòÉΓòÉ

To change the template permissions, select one or more IDs in the Permissions
Template container and then the desired change function.

There are four change functions provided by the Clone window:

o None push button

o Set push button

o Grant push button

o Revoke push button


ΓòÉΓòÉΓòÉ 6.3. Adding or Removing IDs ΓòÉΓòÉΓòÉ

To add one or more IDs to the permissions template, select the Add IDs push
button to display a list of IDs on the server.

To remove one or more IDs, select the IDs to remove from the Permissions
Template Container and then select the Remove IDs push button.


ΓòÉΓòÉΓòÉ 6.4. Saving the Permissions ΓòÉΓòÉΓòÉ

Changes you make on the Clone Profiles Window are not saved automatically as
you make them.

To replace the original permissions in all the profiles with the new
permissions in the Permissions Template Container, select OK.


ΓòÉΓòÉΓòÉ 6.5. Restoring the Original Template Permissions ΓòÉΓòÉΓòÉ

Since the changes you make on the Clone Profiles Window are not saved
automatically as you make them, you can return at any time to the original
permissions settings for the selected profile in the Profiles Combination Box.

To restore the original template permissions and display them in the
Permissions Template Container, select the Undo push button.

Note that any permission changes you make will be lost.


ΓòÉΓòÉΓòÉ 6.6. Canceling Permissions Changes ΓòÉΓòÉΓòÉ

If you want to return without making any permission changes, select the Cancel
push button


ΓòÉΓòÉΓòÉ 6.7. Clone Profiles Window Controls ΓòÉΓòÉΓòÉ

The Clone Access Control Profiles  contains the following controls:

o Profiles list
o Permissions Template container
o None push button
o Permissions list
o Set push button
o Grant push button
o Revoke push button
o Add IDs push button
o Remove IDs push button
o OK push button
o Cancel push button
o Help push button
o Undo push button


ΓòÉΓòÉΓòÉ 6.7.1. Profiles List ΓòÉΓòÉΓòÉ

This list contains the profiles you have chosen to set to the same permissions.

When the Clone Profiles window is first displayed, the first profile in the
list will be selected and its permissions will be displayed in the Permissions
Template Container. You can select any profile in this list to display its
permissions.  To minimize the permission changes necessary, select the profile
whose permissions most closely match the exact permissions you want to copy.


ΓòÉΓòÉΓòÉ 6.7.2. None Push Button ΓòÉΓòÉΓòÉ

This push button will set the permission of the selected users in the
Permissions Template Container to None.

To set the None permission:

 1. Select the users you want to change.

 2. Select the None push button.


ΓòÉΓòÉΓòÉ 6.7.3. Help Push Button ΓòÉΓòÉΓòÉ

This push button displays help for the Clone Profiles window.


ΓòÉΓòÉΓòÉ 6.7.4. Revoke Push Button ΓòÉΓòÉΓòÉ

This push button revokes the selected permissions in the Permissions list from
the selected users in the Permissions Template container.

To revoke permissions:

 1. Select the users whose permissions you want to change.

 2. Select the permissions you want to revoke from the Permissions list.

 3. Select the Revoke push button.

The selected permissions are the only permissions revoked; any other
permissions remain unchanged. If the result of the revoke action leaves a user
with no permissions, the permission for that user are set to None.


ΓòÉΓòÉΓòÉ 6.7.5. Grant Push Button ΓòÉΓòÉΓòÉ

This push button grants the selected permissions in the Permissions list to the
selected users in the Permissions Template Container.

To grant permissions:

 1. Select the users whose permissions you want to change.

 2. Select the permissions you want to grant from the Permissions list.

 3. Select the Grant push button.

The selected permissions are the only permissions granted; any other
permissions remain unchanged.


ΓòÉΓòÉΓòÉ 6.7.6. Permissions List ΓòÉΓòÉΓòÉ

This list contains a list of access permissions that can be selected to perform
the Set, Grant, or Revoke functions.


ΓòÉΓòÉΓòÉ 6.7.7. Undo Push Button ΓòÉΓòÉΓòÉ

This push button resets the permissions in the Permissions Template container
back to the state that was displayed when the selected profile in the profiles
combination box was first selected.

To perform this function, the Clone Access Control Profiles window reads the
current permissions from the access control database for the selected profile.


ΓòÉΓòÉΓòÉ 6.7.8. OK Push Button ΓòÉΓòÉΓòÉ

This push button takes the permissions displayed in the Permissions Template
container and copies them to all the profiles in the Profiles List. All
previous permission settings are replaced.


ΓòÉΓòÉΓòÉ 6.7.9. Cancel Push Button ΓòÉΓòÉΓòÉ

This push button returns you to the previous window without effecting any of
the selected profiles.


ΓòÉΓòÉΓòÉ 6.7.10. Remove IDs Push Button ΓòÉΓòÉΓòÉ

This push button removes the selected IDs from the Permissions Template
container.

To remove IDs:

 1. Select the IDs you want to remove.

 2. Select the Remove IDs push button.


ΓòÉΓòÉΓòÉ 6.7.11. Add IDs Push Button ΓòÉΓòÉΓòÉ

This push button displays a panel containing the defined IDs on the server
being managed so that you can select a list of IDs to be added to the profile.


ΓòÉΓòÉΓòÉ 6.7.12. Permissions Template Container ΓòÉΓòÉΓòÉ

This container initially contains the permissions stored in the selected
profile.

Use the other controls on the Clone Profiles window to set the new permissions
for this resource.

When you select OK, the permissions in this container are written to all the
profiles in the Profiles list.

Changes you make in this container are not written to the database until you
select OK.


ΓòÉΓòÉΓòÉ 6.7.13. Set Push Button ΓòÉΓòÉΓòÉ

This push button sets the permissions for the selected users to the permissions
selected in the Permissions list.

To set permissions:

 1. Select the users whose permissions you want to change.

 2. Select the permissions you want to set from the Permissions list.

 3. Select the Set push button.


ΓòÉΓòÉΓòÉ 7. Access Control Macros ΓòÉΓòÉΓòÉ

The Access Control Macros facility allows you to define a list of macros that
can be executed against a list of profiles.

This Macro window gives you the following capabilities:

o Adding new macro commands

o Deleting macro commands

o Executing the list of macros

o Canceling without any profile changes


ΓòÉΓòÉΓòÉ 7.1. Adding Macros ΓòÉΓòÉΓòÉ

To add an Access Control Macro to the Macros container, select the Add push
button to display a the Add Macro window.


ΓòÉΓòÉΓòÉ 7.2. Deleting Macros ΓòÉΓòÉΓòÉ

To delete one or more Access Control Macros, select the macros you want to
delete in the Macros container, and then select the Delete push button.


ΓòÉΓòÉΓòÉ 7.3. Executing the Macros List ΓòÉΓòÉΓòÉ

To execute the list of macros displayed in the Macros container against the
list of profiles in the Profiles list, select OK.


ΓòÉΓòÉΓòÉ 7.4. Canceling the Macro Window ΓòÉΓòÉΓòÉ

If you want to return without making any permissions changes, select the Cancel
push button.


ΓòÉΓòÉΓòÉ 7.5. Macros Window Controls ΓòÉΓòÉΓòÉ

The Access Control Macros window contains the following controls:

o Profiles list
o Macros container
o Add push button
o OK push button
o Delete push button
o Cancel push button
o Help push button


ΓòÉΓòÉΓòÉ 7.5.1. Profiles List ΓòÉΓòÉΓòÉ

This list contains the list of profiles that the macros in the Macros container
are executed against.


ΓòÉΓòÉΓòÉ 7.5.2. Macros Container ΓòÉΓòÉΓòÉ

This container displays the macros that will be executed against the profiles
listed in the Profiles list.


ΓòÉΓòÉΓòÉ 7.5.3. Add Push button ΓòÉΓòÉΓòÉ

Select this push button to display the Add Macros window which allows you to
create a new macro and add it to the Macros container.


ΓòÉΓòÉΓòÉ 7.5.4. OK Push button ΓòÉΓòÉΓòÉ

Select this push button to execute the list of macros in the Macros container
against the list of profiles in the Profiles list.


ΓòÉΓòÉΓòÉ 7.5.5. Delete Push button ΓòÉΓòÉΓòÉ

Select this push button to delete the selected macros from the Macros
container.


ΓòÉΓòÉΓòÉ 7.5.6. Cancel Push button ΓòÉΓòÉΓòÉ

Select this push button if you want to return to the previous window without
making any permission changes.


ΓòÉΓòÉΓòÉ 7.5.7. Help Push button ΓòÉΓòÉΓòÉ

Select this push button to display general help regarding the Access Control
Macros window.


ΓòÉΓòÉΓòÉ 8. Add Access Control Macros ΓòÉΓòÉΓòÉ

The Add Access Control Macros window allows you to create new Access Control
Macros.

This Add Macro window gives you the following capabilities:

o Specify the ID whose permissions are to be changed.

o Select the type of change.

o Add the macro.

o Cancel without adding a macro.


ΓòÉΓòÉΓòÉ 8.1. Specifying the ID ΓòÉΓòÉΓòÉ

There are two ways to specify the ID whose permissions are to be changed.

o Type the ID in the ID entry field.

o Select the Find Push button to display the Users and Groups window where you
  can select the ID from a list.


ΓòÉΓòÉΓòÉ 8.2. Selecting the Type of Change ΓòÉΓòÉΓòÉ

A list of change functions is available on the Add Macro window. Select the
radio button that describes the change you want the macro to perform.

The change functions are:

o Set
o Grant
o Revoke
o Remove ID


ΓòÉΓòÉΓòÉ 8.3. Adding the Macro ΓòÉΓòÉΓòÉ

When you have completed selecting the parameters of the macro, select OK to
create the new macro.


ΓòÉΓòÉΓòÉ 8.4. Canceling the Add Macro Window ΓòÉΓòÉΓòÉ

If you want to return without adding any macros, select the Cancel push button.


ΓòÉΓòÉΓòÉ 8.5. Add Macros Window Controls ΓòÉΓòÉΓòÉ

The Add Access Control Macros window contains the following controls:

o Find push button
o Permissions list
o None check box
o Set radio button
o Grant radio button
o Revoke radio button
o ID entry field
o Remove ID radio button
o OK push button
o Cancel push button
o Help push button


ΓòÉΓòÉΓòÉ 8.5.1. Find Push Button ΓòÉΓòÉΓòÉ

Select this push button to display the Users and Groups window where you can
select an ID to place in the ID entry field.


ΓòÉΓòÉΓòÉ 8.5.2. Permissions List ΓòÉΓòÉΓòÉ

This list contains a list of access permissions that can be selected to perform
the Set, Grant, or Revoke functions.


ΓòÉΓòÉΓòÉ 8.5.3. None Check Box ΓòÉΓòÉΓòÉ

Select this check box if you want the macro to change the permission of the
specified ID to None.

This check box can only be selected if the Set radio button is selected.


ΓòÉΓòÉΓòÉ 8.5.4. Set Radio Button ΓòÉΓòÉΓòÉ

Select this radio button if you want the macro to set the permissions of the
specified ID to the permissions selected in the Permissions list.

To specify a Set macro:

 1. Select the desired permissions from the Permissions list.

 2. Select the Set radio button.


ΓòÉΓòÉΓòÉ 8.5.5. Grant Radio Button ΓòÉΓòÉΓòÉ

Select this radio button if you want the macro to grant the permissions
selected in the Permissions list to the ID specified.

To specify a Grant macro:

 1. Select the desired permissions from the Permissions list.

 2. Select the Grant radio button.


ΓòÉΓòÉΓòÉ 8.5.6. Revoke Radio Button ΓòÉΓòÉΓòÉ

Select this radio button if you want the macro to revoke the permissions
selected in the Permissions list from the ID specified.

To specify a Revoke macro:

 1. Select the desired permissions from the Permissions list.

 2. Select the Revoke radio button.


ΓòÉΓòÉΓòÉ 8.5.7. ID Entry Field ΓòÉΓòÉΓòÉ

Type the ID in this field whose permissions are to be changed by the created
macro.


ΓòÉΓòÉΓòÉ 8.5.8. Remove ID Radio Button ΓòÉΓòÉΓòÉ

Select this radio button if you want the macro to remove the specified ID from
the profiles.


ΓòÉΓòÉΓòÉ 8.5.9. OK Push Button ΓòÉΓòÉΓòÉ

Select this push button to add the specified macro to the Access Control Macros
Window.


ΓòÉΓòÉΓòÉ 8.5.10. Cancel Push Button ΓòÉΓòÉΓòÉ

Select this push button is you want to return to the to the Access Control
Macros Window without adding a macro.


ΓòÉΓòÉΓòÉ 8.5.11. Help Push Button ΓòÉΓòÉΓòÉ

Select this push button to display general help regarding the Add Access
Control Macros window.


ΓòÉΓòÉΓòÉ 9. Users and Groups Window ΓòÉΓòÉΓòÉ

The Users and Groups window allows you to select one or more IDs.

This Users and Groups window gives you the following capabilities:

o Selecting IDs

o Returning the list of IDs to the parent window

o Canceling without returning a list

o Refreshing the list of IDs


ΓòÉΓòÉΓòÉ 9.1. Selecting IDs ΓòÉΓòÉΓòÉ

The IDs container displays the wsers and groups that are defined to the server.
Use your mouse or keyboard to select the desired IDs.


ΓòÉΓòÉΓòÉ 9.2. Returning a List of IDs ΓòÉΓòÉΓòÉ

To return the list of IDs to the parent window:

 1. Select the IDs in the IDs container.

 2. Select OK.


ΓòÉΓòÉΓòÉ 9.3. Canceling the IDs Window ΓòÉΓòÉΓòÉ

If you want to return without returning a list of IDs, select the Cancel push
button.


ΓòÉΓòÉΓòÉ 9.4. Refreshing the List of IDs ΓòÉΓòÉΓòÉ

If you want to refresh the list of the IDs defined on the server, select the
Refresh push button.


ΓòÉΓòÉΓòÉ 9.5. Users and Groups Window Controls ΓòÉΓòÉΓòÉ

The Users and Groups window contains the following controls:

o IDs container
o OK push button
o Cancel push button
o Help push button
o Refresh push button


ΓòÉΓòÉΓòÉ 9.5.1. IDs Container ΓòÉΓòÉΓòÉ

This container displays the defined IDs on the server.


ΓòÉΓòÉΓòÉ 9.5.2. OK Push Button ΓòÉΓòÉΓòÉ

Select this push button to send the list of selected IDs in the IDs container
to the parent window.


ΓòÉΓòÉΓòÉ 9.5.3. Cancel Push Button ΓòÉΓòÉΓòÉ

Select this push button if you want to return to the previous panel without
returning the selected IDs.


ΓòÉΓòÉΓòÉ 9.5.4. Help Push Button ΓòÉΓòÉΓòÉ

Select this push button to display general help regarding the Users and Groups
window.


ΓòÉΓòÉΓòÉ 9.5.5. Refresh Push Button ΓòÉΓòÉΓòÉ

Select this push button to refresh the list of defined IDs in the IDs
container.


ΓòÉΓòÉΓòÉ 10. Delete Confirmation ΓòÉΓòÉΓòÉ

The Delete Confirmation window is displayed after you have chosen to delete one
or more profiles.  This window gives you an opportunity to cancel the delete
operation.

The Delete Confirmation window contains the following controls:

o Profiles list

o OK push button

o Cancel push button

o Help push button


ΓòÉΓòÉΓòÉ 10.1. Profiles List ΓòÉΓòÉΓòÉ

This list contains the profiles that will be deleted if you select OK.


ΓòÉΓòÉΓòÉ 10.2. OK Push Button ΓòÉΓòÉΓòÉ

Select this push button if you want to delete the profiles contained in the
Profiles list.


ΓòÉΓòÉΓòÉ 10.3. Cancel Push Button ΓòÉΓòÉΓòÉ

Select this push button if you want to return without deleting the profiles
contained in the Profiles list.


ΓòÉΓòÉΓòÉ 10.4. Help Push Button ΓòÉΓòÉΓòÉ

Select this push button if you want to get help regarding the Delete Profiles
window.


ΓòÉΓòÉΓòÉ 11. General Topics ΓòÉΓòÉΓòÉ

There is help for the following general topics.

o Menu items

o Logging on to the Network

o Help for SYS errors

o Help for NET errors

o Level of authority

o Selecting a server


ΓòÉΓòÉΓòÉ 11.1. Menu Items ΓòÉΓòÉΓòÉ

The following menu items appear in various menus in the Access Control Manager:

o Add
o Edit
o Delete
o Clone
o Macros
o Help
o Find
o All descendents
o Help index
o General help
o Select a server
o Exit
o Manage
o Options
o Close
o Entire window
o Refresh now
o Scan
o Descendents
o All trees
o Immediate descendents


ΓòÉΓòÉΓòÉ 11.1.1. Add a Profile ΓòÉΓòÉΓòÉ

Select this menu item to display the Add/Edit window, which allows you to add a
new profile.


ΓòÉΓòÉΓòÉ 11.1.2. Edit a Profile ΓòÉΓòÉΓòÉ

Select this menu item to display the Add/Edit window, which allows you to edit
a profile.


ΓòÉΓòÉΓòÉ 11.1.3. Delete a Profile ΓòÉΓòÉΓòÉ

Select this menu item to delete a profile.  A Delete Confirmation window is be
displayed before the profiles are actually deleted to permit you to confirm
your delete choice.


ΓòÉΓòÉΓòÉ 11.1.4. Clone a Profile ΓòÉΓòÉΓòÉ

Select this menu item to display the Clone Profile window, which allows you to
clone the selected profiles.


ΓòÉΓòÉΓòÉ 11.1.5. Access Control Macros ΓòÉΓòÉΓòÉ

Select this menu item to display the Access Control Macros window, which allows
you to define macros to execute against the selected profiles.


ΓòÉΓòÉΓòÉ 11.1.6. Access Control Manager Help ΓòÉΓòÉΓòÉ

Select this menu bar item to display a menu containing the following choices:

o Help index
o General help


ΓòÉΓòÉΓòÉ 11.1.7. Find Menu ΓòÉΓòÉΓòÉ

Select this menu bar item to display a menu containing the following choices:

o All descendants
o Immediate descendants
o Entire window

In each case, the Find window is displayed containing the requested list of
profiles.


ΓòÉΓòÉΓòÉ 11.1.8. All descendents ΓòÉΓòÉΓòÉ

Select this menu item to display a list of all descendents of the cursored
profile.

In the case of files and directories, all descendents of the current profile
include the profiles on the files and directories listed when you issue the DIR
/S command from the directory protected by the cursored profile.

Only profiles preceeded by a + character have decendents. If a profile is not
preceeded by a + character, use the Scan function to determine if it has any
descendents.

Profiles on individual files, printers, serial devices, and pipes do not have
any descendents.


ΓòÉΓòÉΓòÉ 11.1.9. Help Index ΓòÉΓòÉΓòÉ

Select this menu item to display the help index.


ΓòÉΓòÉΓòÉ 11.1.10. General Help ΓòÉΓòÉΓòÉ

Select this menu item to display general help for the Access Control Manager.


ΓòÉΓòÉΓòÉ 11.1.11. Select a Server ΓòÉΓòÉΓòÉ

Select this menu item to display the Select a Server window, which allows you
to view the profiles on a different server.


ΓòÉΓòÉΓòÉ 11.1.12. Exit the Access Control Manager ΓòÉΓòÉΓòÉ

Select this menu item to exit the Access Control Manager.


ΓòÉΓòÉΓòÉ 11.1.13. Manage Menu (Main Window) ΓòÉΓòÉΓòÉ

Select this menu bar item to display a menu containing the following choices:

o Add
o Edit
o Delete
o Macros
o Exit


ΓòÉΓòÉΓòÉ 11.1.14. Manage Menu (Find Window) ΓòÉΓòÉΓòÉ

Select this menu bar item to display a menu containing the following choices:

o Add
o Edit
o Delete
o Clone
o Macros
o Exit


ΓòÉΓòÉΓòÉ 11.1.15. Options Menu ΓòÉΓòÉΓòÉ

Select this menu bar item to display a menu containing the following choices:

o Select a server
o Scan


ΓòÉΓòÉΓòÉ 11.1.16. Close Profile List ΓòÉΓòÉΓòÉ

Select this menu item to close the current profile list.


ΓòÉΓòÉΓòÉ 11.1.17. Entire Window ΓòÉΓòÉΓòÉ

Select this menu item to display a list of the all profiles protecting
resources on the current server.


ΓòÉΓòÉΓòÉ 11.1.18. Refresh Now ΓòÉΓòÉΓòÉ

Select this menu item to update the current window.


ΓòÉΓòÉΓòÉ 11.1.19. Scan Profiles ΓòÉΓòÉΓòÉ

The process of finding profiles on a server can be time consuming. The Access
Control Manager provides a Scan function that lets you control what profiles
from the server are listed.

Select this menu item to display a menu containing the following scan function
choices:

o Descendents
o All trees


ΓòÉΓòÉΓòÉ 11.1.20. Descendents ΓòÉΓòÉΓòÉ

Select this menu item to search for profiles that are descendents of the
cursored profile and add them to the current tree view.

Note:  This form of Scan can take a long time if you request a scan of this
       type from the root of a drive with many profiles.


ΓòÉΓòÉΓòÉ 11.1.21. All Trees ΓòÉΓòÉΓòÉ

Select this menu item to search all drives and devices for profiles and add
them to the current tree view.

Note:  This form of Scan can take a long time.


ΓòÉΓòÉΓòÉ 11.1.22. Immediate Descendents ΓòÉΓòÉΓòÉ

Select this menu item to display a list of the immediate descendents of the
cursored profile.

In the case of files and directories, the immediate descendents of the current
profile include the profiles on the files and directories listed when you issue
the DIR command from the directory protected by the cursored profile.

Only profiles preceeded by a + character have decendents. If a profile is not
preceeded by a + character, use the Scan function to determine if the profile
has any descendents.

Profiles on individual files, printers, serial devices, and pipes do not have
any descendents.


ΓòÉΓòÉΓòÉ 11.1.23. Select Menu ΓòÉΓòÉΓòÉ

Select this menu bar item to display a menu containing the following choices:

o Select all
o Deselect all


ΓòÉΓòÉΓòÉ 11.1.24. Select all ΓòÉΓòÉΓòÉ

Select this menu item to select all the profiles displayed in the Find profiles
list.


ΓòÉΓòÉΓòÉ 11.1.25. Deselect all ΓòÉΓòÉΓòÉ

Select this menu item to deselect all the profiles displayed in the Find
profiles list.


ΓòÉΓòÉΓòÉ 11.2. Logging On to the Network ΓòÉΓòÉΓòÉ

You must be logged on to the network to use the Access Control Manager. There
are two ways logon:

o Select the logon icon.

o Use the logon command from an OS/2 window or full screen.

Please refer to the documentation for these facilities for details regarding
their use.


ΓòÉΓòÉΓòÉ 11.3. Help for SYS Errors ΓòÉΓòÉΓòÉ

If the LAN Server network software detects an error, the Access Control Manager
displays a pop-up window with the SYS error in it.  To get more information on
the error, open a OS/2 session (window or full screen) and type:

HELP SYSxxxx

where xxxx is the number of the SYS error.


ΓòÉΓòÉΓòÉ 11.4. Help for NET Errors ΓòÉΓòÉΓòÉ

If the LAN Server network software detects an error, the Access Control Manager
displays a pop-up window with the NET error in it.  To get more information on
the error, open a OS/2 session (window or full screen) and type:

HELP NETxxxx

where xxxx is the number of the NET error.


ΓòÉΓòÉΓòÉ 11.5. Level of Authority ΓòÉΓòÉΓòÉ

Administrators are allowed to manage all access control profiles on a server.

Normal users are allowed to manage profiles for which they are granted the
Permissions access permission in the profile.

The Access Contol Manager determines the correct list for all types of users.


ΓòÉΓòÉΓòÉ 11.6. Access Control Profiles ΓòÉΓòÉΓòÉ

An Access Control Profile is a set of access rules that the server uses to
decide if a user has the authority to perform a particular function against a
resource.

A profile consists of the name of the resource it protects and a list of IDs
and the access permissions for those IDs.  Both user IDs and group IDs can be
listed in a profile.


ΓòÉΓòÉΓòÉ 11.7. Domains File - LSTK.INI ΓòÉΓòÉΓòÉ

You can configure the Access Control Manager to show you the servers in any
domain on your network by adding domain names to the LSTK.INI file.  The Access
Control Manager includes an empty LSTK.INI file for you to start with. Simply
add a line containing the domain name for each domain you want to view.

For example, if you want to view the servers in DOMAIN1, DOMAIN2, and DOMAIN3,
create an LSTK.INI with the format below:

[DOMAINS]
DOMAIN1
DOMAIN2
DOMAIN3

Note:  The LSTK.INI file must be in the same directory as the ACM.EXE file.


ΓòÉΓòÉΓòÉ 11.8. Access Permissions ΓòÉΓòÉΓòÉ

A permission in a profile is the pairing of a user or group ID with a
combination of access permissions.  This pairing defines the access rights for
the ID specified against the resource the profile protects.

The following list contains the access permissions supported by LAN Server:

o None (N) - No access permissions

o Execute (X) - The permission to execute a program.

o Read (R) - The permission to read data from a file or device.

o Write (W) - The permission to write data to a file or device.

o Create (C) - The permission to create a file or print job in a print spool.

o Delete (D) - The permission to delete a file.

o Attributes (A) - The permission to access the attributes of a file.

o Permissions (P) - The permissions to modify the profile of a resource.

All the permissions are valid for directories and files.  None, Create, and
Permissions are valid for a printer.  None, Read, Write, Create, and
Permissions are valid for a serial device.  None, Read, Write, Create, and
Permissions are valid for a pipe.