PreviousNext

ACL Entry Types Used for Principals

You use ACL entry types to specify the category of principal for which the ACL entry is created. These ACL entry types are described in the following table.


ACL Entry Types Used for CDS Principals

Entry Type Purpose
user Specifies an ACL entry for an individual principal whose credentials were authenticated within the local cell.
group Specifies an ACL entry for an authorization group whose members have been authenticated within the local cell.
other_obj Specifies an ACL entry for authenticated principals in the local cell who are not individual users named by an ACL entry of the type user or members of a group named by an ACL entry of the type or group.
foreign_user Specifies an ACL entry for an authenticated principal in a foreign cell.
foreign_group Specifies an ACL entry for an authorization group whose members were authenticated in a foreign cell.
foreign_other Specifies an ACL entry for authenticated principals in a foreign cell who are not individual users named by an ACL entry of the type foreign_user, or members of a group named by an ACL entry of the type foreign_group.
any_other Specifies an ACL entry for an authenticated principal who is not otherwise covered by any of the preceding ACL entry types.
mask_obj Specifies an ACL entry containing a mask that is substituted for the permissions of any principals, whose credentials are either authenticated or unauthenticated.
unauthenticated Specifies an ACL entry for principals who cannot pass authentication procedures.
user_delegate Specifies an ACL entry for an intermediary that acts for an authenticated principal in the local cell.
group_delegate Specifies an ACL entry for an intermediary that acts for the authenticated principals who are members of an authorization group in the local cell.
other_delegate Specifies an ACL entry for an intermediary that acts for authenticated principals in the local cell who are not individual users named by an ACL entry of the type user_delegate or who are not members of a group named by an ACL entry of the type group_delegate.
foreign_user_delegate Specifies an ACL entry for an intermediary that acts for an authenticated principal in a foreign cell.
foreign_group_delegate Specifies an ACL entry for an intermediary that acts for the members of an authorization group in a foreign cell.
foreign_other_delegate Specifies an ACL entry for an intermediary that acts for authenticated principals in a foreign cell who are not individual users named by an ACL entry of the type foreign_user_delegate or members of a group named by an ACL entry of the type foreign_group_delegate.
any_other_delegate Specifies an ACL entry for an intermediary that acts for authenticated principals in the local cell or in a foreign cell who are not named by an ACL entry of any other type for intermediaries of authenticated principals or groups.