vovacl

vovacl: Usage Message

 DESCRIPTION:
  Manage access control lists (ACLs).

 USAGE:
    % vovacl [OPTIONS] <Object>

 OPTIONS:
    -h        -- This help
    -v        -- Increase verbosity 
    -agent    -- Association of specified ACL. One of the following types and 
                 formats. ACL capabilities for ALL pertinent agents for a 
                 given user are aggregated.
                     "USER name"             OS user name 
                     "FSGROUP name"          VOV FairShare group 
                     "USERGROUP" name        A VOV user group
                     "OSGROUP" name          Unix primary group (Linux only)
                      OWNER
                      ADMIN
                      LEADER 
                 Different VOV object types honor different subsets of the 
                 agents listed above. To see which apply, see the Agents Table 
                 below.     

    -actions  -- Capabilities list for this ACL, space delimited. A list of 
                 access control capabilities is shown in the Capabilities
                 Table below. 
    -append   -- Add specified capabilities to ACL for specified agent
    -set      -- Replace existing ACLs for specified agent
    -delete   -- Remove specified capabilities from specified agent
    -show     -- Show current ACL for specified objects.
    -reset    -- Reset ACL to default values

 OBJECTS:
     <setName>
     <fairshareGroupName>
     <vovId>  -- Where vovId can apply to a job, set, FairShare group, or 
                 resourcemap

 AGENTS TABLE
     The agents list specified with the -agent option is one of the following 
     that is valid for the object type.

     Agent Type               Type of Object

                    Set/Job        FS Group        Resourcemap

     USER              y              y                y 
     USERGROUP         n              n                y 
     FSGROUP           n              y                n 
     OSGROUP           y              n                n 
     OWNER             y              y                y 
     ADMIN             y              y                y 
     LEADER           n/a            n/a              n/a 
     EVERYBODY         y              y                y 

 CAPABILITIES TABLE
     The capabilities list specified with the -agent option is one of the 
     following that is valid for the object type.

     Capability Name               Type of Object

                        Set/Job        FS Group        Resourcemap

     ATTACH              n/a            attach           use
     CHOWN               n/a             n/a             n/a
     CREATE              n/a          create sub-group   n/a
     DELEGATE            n/a             n/a             n/a
     DETACH              n/a           detach            n/a
     EDIT               modify          modify          modify
     EXISTS          preq-for-all       prereq          prereq
     FORGET             delete          delete          delete
     RESUME             resume           n/a             n/a
     RETRACE             run             n/a             n/a
     SIGNAL             signal           n/a             n/a
     STOP              job stop          n/a             n/a
     SUSPEND           suspend           n/a             n/a
     VIEW               view             view            view               

 EXAMPLES:
   % vovacl -agent ADMIN -append -actions "VIEW RETRACE STOP FORGET" MySetName
   % vovacl -agent "USER cadmgr" -append -actions STOP  /system/processcontrol
   % vovacl -agent "USERGROUP designers" -append -actions STOP,FORGET DesignSet
   % vovacl -agent "OSGROUP designers" -append -actions STOP  00123456
   % vovacl -reset 00123456

 NOTE: The SUSPEND action is not applicable to an FSGROUP object.