ACL Entry Types for Delegation

For each ACL entry described in the table in ACL Entry Types for Users and Groups, a corresponding entry of type _delegate is available. The table below describes the ACL entry types that can effectively be used for delegation with DCE LFS objects. (DCE LFS always ignores user_obj_delegate, group_obj_obj, and other_obj_delegate entries, so these entries are omitted from the table.)


ACL Entry Types for Delegation

Delegation Type Key Applies to
user_delegate principal_name The principal principal_name from the default cell acting as a delegate.
foreign_user_delegate cell_name/principal_name The principal principal_name from the foreign cell cell_name acting as a delegate.
group_delegate group_name Members of the group group_name from the default cell acting as delegates.
foreign_group_delegate cell_name/group_name Members of the group group_name from the foreign cell cell_name acting as delegates.
foreign_other_delegate cell_name Principals from the foreign cell cell_name who do not match any of the preceding entries acting as delegates.
any_other_delegate None Principals from any foreign cell who do not match any of the preceding entries acting as delegates.
Some examples of ACL entries for delegation follow:

{user_delegate print-server permissions}
Defines the permissions for the principal print-server from the default cell when the principal is acting as a delegate.

{group_delegate printers permissions}
Defines the permissions for members of the group printers from the default cell when members of the group are acting as delegates.

Each delegation entry can grant any of the permissions available for DCE LFS objects (r, w, x, c, i, and d). Each permission has the same meaning for a delegation entry that it has for a nondelegation entry. (See ACL Permissions.)