Administrator's Guide for Rational ClearCase LT, Release 2002.05.00, All Platforms

20.1 ClearCase ACLs

Rational ClearCase LT establishes ACLs for VOB and view storage directories when VOBs and views are created. These ACLs have a particular form that ClearCase LT relies on. The following example shows the correct ACL for a VOB storage directory, myvob.vbs, created by user ccase_adm, who has primary group user, in domain nt_west:

	`cacls c:\vobstore\myvob.vbs NT_WEST\user:(CI)R (VOB's principal group) Everyone:(CI)R NT_WEST\ccase_adm:(CI)(special access:) (VOB owner) STANDARD_RIGHTS_ALL DELETE READ_CONTROL WRITE_DAC WRITE_OWNER SYNCHRONIZE STANDARD_RIGHTS_REQUIRED FILE_GENERIC_READ FILE_GENERIC_WRITE FILE_GENERIC_EXECUTE FILE_READ_DATA FILE_WRITE_DATA FILE_APPEND_DATA FILE_READ_EA FILE_WRITE_EA FILE_EXECUTE FILE_READ_ATTRIBUTES FILE_WRITE_ATTRIBUTES`

	`NT AUTHORITY\SYSTEM:(CI)F (built-in server identity) NT_WEST\user:(OI)(IO)(special access:) (VOB's principal group) GENERIC_READ GENERIC_EXECUTE`

	`Everyone:(OI)(IO)(special access:) GENERIC_READ GENERIC_EXECUTE`

	`NT_WEST\ccase_adm:(OI)(IO)(special access:) (VOB owner) DELETE WRITE_DAC WRITE_OWNER GENERIC_READ GENERIC_WRITE GENERIC_EXECUTE`

	`NT AUTHORITY\SYSTEM:(OI)(IO)F BUILTIN\Administrators:(OI)(special access:) DELETE READ_CONTROL WRITE_DAC SYNCHRONIZE FILE_GENERIC_READ FILE_GENERIC_WRITE FILE_GENERIC_EXECUTE FILE_READ_DATA FILE_WRITE_DATA FILE_APPEND_DATA FILE_READ_EA FILE_WRITE_EA FILE_EXECUTE FILE_READ_ATTRIBUTES FILE_WRITE_ATTRIBUTES`