Conference orarep::nomahs::repository

1057.0. "Question on dictionary protection" by M5::GHODSON () Tue Feb 25 1997 17:45

I have a customer that is using one repository with multiple directories
below the top level, one for each user.  He would like each user to
have full access to their directory and not be able to define elements
in the top level or the other users' directories.

I have not been able figure a way to give them access to one specific
directory without also giving access to the top level.  Is there a way
to do this?

For example:

From a privileged session:

CDO>  show protection for repository DISK$USR3:[GHODSON.CDDTEST]

 Directory DISK$USR3:[GHODSON.CDDTEST]CDD$PROTOCOLS

CDD$SELF
          (IDENTIFIER=[WWS,GHODSON],ACCESS=READ+WRITE+MODIFY+ERASE+SHOW+DEFINE+
          CHANGE+DELETE+CONTROL+OPERATOR+ADMINISTRATOR)
          (IDENTIFIER=[*,*],ACCESS=READ+SHOW)

    Default acl

          (IDENTIFIER=[WWS,GHODSON],ACCESS=READ+WRITE+MODIFY+ERASE+SHOW+DEFINE+
          CHANGE+DELETE+CONTROL+OPERATOR+ADMINISTRATOR)
          (IDENTIFIER=[*,*],ACCESS=READ+SHOW)
CDO>  show protection for directory DISK$USR3:[GHODSON.CDDTEST]test1

 Directory DISK$USR3:[GHODSON.CDDTEST]

TEST1
          (IDENTIFIER=[WWS,GHODSON],ACCESS=READ+SHOW)
          (IDENTIFIER=[*,*],ACCESS=READ+WRITE+SHOW+CHANGE)

Then from another login session for a nonpriv user:

CDO> show def
DISK$USR3:[GHODSON.CDDTEST]TEST1
CDO> show privilege for directory DISK$USR3:[GHODSON.CDDTEST]test1

 Directory DISK$USR3:[GHODSON.CDDTEST]

TEST1
          (IDENTIFIER=[*,*],ACCESS=READ+WRITE+SHOW+CHANGE)
CDO> define field test3 datatype is text size is 10.
%CDO-E-ERRDEFINE, error defining an object
-CDD-E-NOWRITE, no privilege to write DISK$USR3:[GHODSON.CDDTEST]


Thanks for any help.
--Gary Hodson