SPD Server ACL Security Overview

SPD Server uses access control lists (ACLs) and SPD Server user IDs to secure domain resources. Users obtain their user ID and password from the SPD Server administrator.
SPD Server also supports ACL groups, which are similar to UNIX groups. You can associate an SPD Server user as many as five ACL groups.
ACL permissions affect all SPD Server resources, including domains, tables, table columns, catalogs, catalog entries, and utility files. SPD Server grants access rights only to the owner (creator) of an SPD Server resource. Resource owners can use PROC SPDO to grant Read, Write, and Alter ACL permissions to a specific group (called an ACL group) or to all SPD Server users.
The resource owner can use the following properties to grant ACL permissions to all SPD Server users:
READ
grants universal Read access to the resource (read or query)
WRITE
grants universal Write access to the resource (append to or update)
ALTER
grants universal Alter access to the resource (add, rename, delete, or replace a resource, and add or delete indexes associated with a table)
The resource owner can use the following properties to grant ACL permissions to a named ACL group:
GROUPREAD
grants group Read access to the resource (read or query)
GROUPWRITE
grants group Write access to the resource (append to or update)
GROUPALTER
grants group Alter access to the resource (rename, delete, or replace a resource, and add or delete indexes associated with a table)