[Info-vax] File Protection issue - one more try

[Bob Gezelter]

On Feb 10, 5:55 pm, samizahra <sami.z.za... at intel.com> wrote:
> The user account login.com has this line:
>             $ set protection=(g:rwed,w:re)/default
>
> I use edit and create a new file FILE_TEST.COM
> the protection on this file will be:
>              FILE_TEST.COM;1      [GRP1500,DPS]
> (RWED,RWED,RWED,RE)
>
> Then the same user account will submit a batch job:
>               submit/queue=SMASH$KICKOFF$BATCH -
>                           /name="testing File prot.." -
>                           /log=IMOACT:[DPS]FILE_TEST.log -
>                                             IMOACT:[DPS]FILE_TEST.Com
>
> The protection on the log file FILE_TEST.log is:
>               FILE_TEST.LOG;1      [GRP1500,DPS]
> (RWED,RWED,RE,)
>
> My question is:
>
> why the batch job creates the log file without world protection?
> How can I force the batch job to create log file with this protection
> (RWED,RWED,RWED,RE)
>
> Sami

Sami,

A suggestion: Step back from experimentation and instead learn the
mechanism itself. It will make understanding how the different
commands interact far clearer.

SET PROTECTION (in the words of the HELP text) "Establishes the
default protection mask for files created by the current process". In
other words, it sets a default value for your PROCESS, It will not
affect the protection of existing files.

In some sense, setting an ACL with an ACE containing an OPTION=DEFAULT
governs the protection masks on files created in the future, not on
already extant files.

Depending on what is desired, one can edit the ACL on the file (using
both the DCL SET SECURITY command, or interactively using the EDIT/ACL
command). Another option is to set the protection to the same as an
already existing file (see the HELP text for SET SECURITY/LIKE). In
this vein, it is a good idea to read the OpenVMS Guide to System
Security, which has a significant amount of material on this and
related subjects. The manual is available from HP's OpenVMS www site
at http://www.hp.com/go/openvms.

- Bob Gezelter, http://www.rlgsc.com