This category includes the following APIs:

Access Permission - NetAccessAdd
Access Permission - NetAccessApply
Access Permission - NetAccessCheck
Access Permission - NetAccessDel
Access Permission - NetAccessEnum
Access Permission - NetAccessGetInfo
Access Permission - NetAccessGetUserPerms
Access Permission - NetAccessSetInfo
Access Permission - ent_acl_replace_apply
Access Permission - ent_acl_manipulate_apply

Access permission APIs examine or change user or group access permission records for server resources. They are used with the ACCESS.H and NETCONS.H header files.

Note: The following five APIs are the only ones supported by DSS servers. DSS servers use the DCE access control model. There is only limited support for the NetAccess APIs. DSS clients can remote all APIs to LAN Server or Warp Server servers.

• NetAccessApply or Net32AccessApply 
  NetAccessCheck or Net32AccessCheck
  
  NetAccessGetUserPerms or Net32AccessGetUserPerms
  
  ent_acl_replace_apply
  
  ent_acl_manipulate_apply

  To set access permission on DSS servers, you must use either the DCE sec_acl APIs or MOCL. See:

  • IBM DCE for OS/2 Warp: Application Development Guide - Core Components 
    IBM DCE for OS/2: MOCL Programmer's Guide and Reference

    For a user to access a shared resource, an access permission record must be defined for that resource. An access permission record defines how a user or group can access a shared resource. It contains a set of permissions for each user or group.

    Access permission records are created with the NetAccessAdd API. To delete all access permission records associated with a particular shared resource, call the NetAccessDel API.

    An access permission record contains:

    • The name of the resource 
      A list of users or groups and their access permissions
      
      The audit trail flag, which controls whether audit trail records are written for access to the resource

      The NetAccessGetInfo API can be called to return information about a particular access permission record. To obtain information about all access permission records for which the calling process has special permissions (ACCESS_PERM), call the NetAccessEnum API.

      The access permission record must be defined by a user or an application that already has either administrative permissions or special permission (ACCESS_PERM) for the resource being shared. User permissions have precedence over group permissions. If a user is not defined in the access list for the shared resource, the user's access permissions are the union of all groups to which the user belongs. For more information about access control checking, see the LAN Server Network Administrator Reference Volume 3: Network Administrator Tasks.

      Note: For MOCL programs see DCE for OS/2: Managed Object Class Library Programmer's Guide and Reference. For DCE programs, see DCE for OS/2 Warp: Application Development Reference.

      ---

      [Back] [Next]