For each ACL entry described in the table in ACL Entry Types for Users and Groups, a corresponding entry of type _delegate is available. The table below describes the ACL entry types that can effectively be used for delegation with DCE LFS objects. (DCE LFS always ignores user_obj_delegate, group_obj_obj, and other_obj_delegate entries, so these entries are omitted from the table.)
ACL Entry Types for Delegation
Delegation Type | Key | Applies to |
user_delegate | principal_name | The principal principal_name from the default cell acting as a delegate. |
foreign_user_delegate | cell_name/principal_name | The principal principal_name from the foreign cell cell_name acting as a delegate. |
group_delegate | group_name | Members of the group group_name from the default cell acting as delegates. |
foreign_group_delegate | cell_name/group_name | Members of the group group_name from the foreign cell cell_name acting as delegates. |
foreign_other_delegate | cell_name | Principals from the foreign cell cell_name who do not match any of the preceding entries acting as delegates. |
any_other_delegate | None | Principals from any foreign cell who do not match any of the preceding entries acting as delegates. |
{user_delegate print-server permissions}
Defines the permissions for the principal print-server from the default cell when the principal is acting as
a delegate.
{group_delegate printers permissions}
Defines the permissions for members of the group printers from the default cell when members of the group are
acting as delegates.
Each delegation entry can grant any of the permissions available for DCE LFS objects (r, w, x, c, i, and d). Each permission has the same meaning for a delegation entry that it has for a nondelegation entry. (See ACL Permissions.)