![]() |
![]() |
Each object has an owner name associated with it. The rules governing what objects can be accessed depend on what owner name is used when a session is started. This object owner value can be used to control access to the object.
If a session is started with an empty string for the owner, that session owner is treated with session, (or root) authority. This session can perform any action on any object that is owned by this node regardless of the actual owner of that object. The session owner is set during the call to BSAInit in the AppObjectOwner field of the ObjectOwner structure.
If a session is started with a specific owner name, the session can only perform actions on objects that have that owner name associated with them. Backups or archives into the system all must have this owner name associated with them.Any queries performed only return values that have this owner name associated with them. The object owner value is set during the BSACreateObject call in the Owner field of the ObjectDescriptor structure.
Table 48 summarizes the conditions under which a user has access to
an object.
Table 48. Summary Of User Access To Objects
Session owner | Object owner | User access |
---|---|---|
" " (empty string) (root, system owner) | " " (empty string) | Yes |
" " (empty string) (root, system owner) | specific name | Yes |
specific name | " " (empty string) | No |
specific name | same name | Yes |
specific name | different name | No |