Modifying an Access Control List

Set permissions, change ownership, add users or groups to an access control list (ACL), or remove users or groups.

1. To display the ACL for an item in the data catalog, right-click the item in the Enterprise Explorer view and select Permissions. The Edit Permissions dialog appears.
2. Click on the permission in that user’s or group’s row of the table. For example, to change the Write permission for members of the DomainUsers group, click on the cell that says Unset in the second row of the Write column, then pull down the menu.
3. Select a new value—Allow, for example—from the pull-down menu. At any point, you can click Cancel to dismiss the Edit Permissions dialog without saving your changes, or click OK to dismiss the Edit Permissions dialog and save your changes.
4. To change the object’s owner, click Change Owner. The User/Group Browser dialog appears.
5. Use the Domain pull-down if you want to select a user or group from another Data Federation domain. Click Group if you want to select a group.
6. Choose a user or a group from the list and click OK to dismiss the browser. WorkSpace updates the Edit Permissions dialog to show the object’s new owner.
7. To add a user or group to the ACL, click Add. The User/Group Browser dialog appears.
8. Use the Domain pull-down if you want to select a user or group from another domain. Click the Group button if you want to select a group. WorkSpace updates the Edit Permissions dialog to show the new line in the ACL.
9. Choose a user or a group from the list and click OK to dismiss the browser. In this example, we’ve added a user called Fred.

   Notice that Fred’s permissions are all Unset. If you leave them in that state, Data Federation will drop Fred from the ACL. You can use the Read, Write, Execute, and Delete pull-down menus to set permissions.

10. To remove a user or group from the ACL, select it and click Delete. WorkSpace removes the selected user or group from the ACL.
11. Click OK to save your changes and dismiss the Edit Permissions dialog.

• Data Federation Permissions and Access Control Lists
  Every Data Federation object has an access control list that defines the specific privileges of each user or group to perform actions on the object.
• Permission Settings
  For each action (read, write, execute, delete) that each user or group can perform on an object in the data catalog, the object’s ACL assigns a permission value: Unset, Deny, or Allow.
• Interpretation of Permissions in ACLs
  Some permissions take precedence over others. In cases where two or more permissions disagree, Sybase Data Federation interprets the settings according to specific rules.
• Permissions in Directories and Categories
  You can use categories to solve access problems. You can also use categories and directories along with permissions to hide objects in the data catalog.
• Permissions in Directories and Categories
  You can use categories to solve access problems. You can also use categories and directories along with permissions to hide objects in the data catalog.

Send your feedback on this help topic to Sybase Technical Publications: pubs@sybase.com

Your comments will be sent to the technical publications staff at Sybase, Inc. For product-related issues or technical support, contact Sybase Technical Support at 1-800-8SYBASE.