[Info-vax] ACL Protection On An Image

[Alan Winston - SSRL Central Computing]

In article <97944229-d08a-4761-ac50-2bd4268c76f5 at g38g2000yqd.googlegroups.com>, lee_morgan at hotmail.co.uk writes:
>On 25 Mar, 08:20, IanMiller <g... at uk2.net> wrote:
>
>Hi and thanks for your comments.
>
>Yes, I ensured the user does have the rights identifier and that they
>logged off and back on but still no joy.
>
>The image now looks like so....
>
>ROBOT.EXE;8               78  15-DEC-2005 14:32:39.97
>[SYSTEM]                         (RWED,RWED,RWED,R)
>          (IDENTIFIER=ROBOT$MANAGER,ACCESS=READ+EXECUTE)
>
>But the user still cannot access the image...
>
>$ robot show robot
>ROBOT $2$GGA0: is not responding: Permission denied.
>%SYSTEM-F-NOPRIV, insufficient privilege or object protection
>violation
>
>$ show proc/rights
>
>25-MAR-2009 11:02:39.69   User: GTHORNTON        Process ID:
>00129E7B
>                          Node: CAMUAT           Process name:
>"GTHORNTON"
>
>Process rights:
> GTHORNTON                         resource
> INTERACTIVE
> REMOTE
> ROBOT$MANAGER
>
>System rights:
> SYS$NODE_CAMUAT
>
>Thanks again in advance.
>

Right.  This means that what you're doing is actually working.  The user
executes the application, and the application fails to talk to the robot.

Does it work when you run the command from SYSTEM?

You may need to put an ACL on the robot unit to allow an otherwise unprivileged
account to get at it.

-- Alan