SPDO Procedure
- Syntax
Procedure SyntaxPROC SPDO StatementADD ACL StatementCLUSTER ADD StatementCLUSTER CREATE StatementCLUSTER DESTROY StatementCLUSTER FIX StatementCLUSTER LIST StatementCLUSTER MODIFY StatementCLUSTER REMOVE StatementCLUSTER REPLACE StatementCLUSTER UNDO StatementCONSTRAINT ADD StatementCONSTRAINT DESCRIBE StatementCONSTRAINT REMOVE StatementDELETE ACL StatementLIST ACL StatementLIST USERS StatementLIST USERS/LOCKING StatementMODIFY ACL StatementOPER StatementREFRESH DOMAINS StatementREFRESH PARMS StatementSET ACLTYPE StatementSET ACLUSER StatementSET MODE OPER StatementSET USER StatementSET USER/LOCKING StatementSHOWLIBNAME StatementSPDSCMD StatementSPDSMAC StatementTRUNCATE Statement - Overview
- Concepts
- Examples
MODIFY ACL Statement
Modifies existing ACLs for resources.
| Requirements: | You must be the resource owner, have ACL access to a resource, or have special privilege in order to modify an ACL. When using special privilege, set the ACLSPECIAL= option in the LIBNAME statement. |
| Before using MODIFY ACL, you must set the context for the request with the SET ACLUSER statement. The user name specified in SET ACLUSER must be that of the ACL owner. See SET ACLUSER Statement. | |
| When modifying ACLs for resources other than DATA, also set the ACL type. For more information, see SET ACLTYPE Statement. |
Syntax
Arguments
_ALL_
modifies all existing resource ACLs for which ACLUSER has Control access.
acl
specifies the name of the ACL entry that you want to modify. You can specify more than one ACL.
acl-type
/GENERIC
identifies the specified ACLs as generic ACLs.
| Note | If you specify /GENERIC when modifying a table column ACL, the /GENERIC applies to the table name, not to the column name. You cannot use wildcards with column names. |
/LIBNAME
identifies the domain ACL.
C=cat
identifies the selected ACLs as the names of catalog entries from the catalog cat. The C= option must be paired with the T= option.
permissions
specifies to grant or remove one or more of the following permissions:
ALTER
grants universal ALTER access to the resource.
GROUPALTER
grants group ALTER access to the resource.
GROUPREAD
grants group READ access to the resource.
GROUPWRITE
grants group WRITE access to the resource.
NOALTER
removes universal ALTER access to the resource.
NOGROUPALTER
removes group ALTER access to the resource.
NOGROUPREAD
removes group READ access to the resource.
NOGROUPWRITE
removes group WRITE access to the resource.
NOREAD
removes universal READ access to the resource.
NOWRITE
removes universal WRITE access to the resource.
READ
grants universal READ access to the resource.
WRITE
grants universal WRITE access to the resource.
GroupList
specifies the permissions that you want to assign or modify for an ACL group in the form:
groupname = (Y/N,Y/N,Y/N,Y/N)
T=type
identifies the catalog entry type used to qualify the selected ACLs. This option is required when the C= option is specified.
UserList
specifies the permissions that you want to assign or modify for a user in the form:
username = (Y/N,Y/N,Y/N,Y/N)
Details
Examples
Example 1: Modify Domain ACL
modify acl/LIBNAME ralph=(y,y,n,n);
Example 2: Modify ACL MINE
modify acl mine_aug2016/nowrite bolick=(y,n,n,n) johndoe=(n,n,n,n);
Example 3: Modify Generic ACL
modify acl mine/generic tom=(y,y,y,n);
Example 4: Modify All ACLs
modify acl _all_/gene=(y,,,);
Example 5: Modify a Column ACL
modify acl mine_aug2016.salary/ralph=(y,y,n,n);
Example 6: Modify a Generic Column ACL
modify acl mine.salary/generic debby=(y,y,n,n);
Example 7: Modify ACL for a Catalog
set acltype catalog; modify acl mycat/noread nogroupwrite;
Example 8: Modify Generic ACL for Catalog Entries
set acltype catalog; modify acl my c=mycat t=catams/generic noread;