Overview - Using ACLs and Groups

This topic summarizes the use of DCE access control lists (ACLs) with DFS. DCE ACLs allow you to specify access to files and directories for individuals and groups of users. DCE ACLs can be used to protect files and directories stored in DCE LFS filesets. (See the Security Service portion of the OSF DCE Administration Guide - Core Components for details about manipulating DCE ACLs.)

This topic also presents information about groups. In addition to using groups in ACLs, you can use groups in DFS administrative lists to specify the users who are allowed to issue commands that affect filesets and server processes. In this manner, you can precisely control the security of the administrative domains in your cell. (See Using Administrative Lists and Keytab Files for complete details about using administrative lists; see the Security Service portion of the OSF DCE Administration Guide - Core Components for information about creating and maintaining groups.)

Note: The information in this topic applies only to ACLs used with data stored in DCE LFS filesets. It does not apply to ACLs used with other DCE components. Differences exist between the use of DCE ACLs with DCE LFS objects and the use of DCE ACLs with other DCE components.