Schedule permissions

The Schedule Permissions dialog box displays the ClearCase scheduler's access control list (ACL). The ACL determines who is allowed access to the schedule and to the ACL itself. The ACL is a list of access control entries (ACEs). Each ACE assigns an access type to an identity.

Identities

There are four kinds of identities:

Identity kind
Identity name format
Everyone
Everyone
Domain
domain_name
Group
domain_name\group_name | domain_name/group_name
User
domain_name\user_name | domain_name/user_name

The domain_name is a Windows NT or Active Directory domain for Windows hosts and an NIS domain name for UNIX hosts. On Windows, group_name must be a domain global group and user_name must be a domain user account.

Access types

Each identity has one of three access types:

Access type Access to schedule Access to ACL
Read Read only Read only
Change Read and write; can start jobs Read only
Full Read and write; can start jobs Read and write

Each identity has only one access type. However, access rights are inherited from Everyone to Domain to Group to User in such a way that each user has the least restrictive access rights that apply. For example, if a user's ACL entry specifies Read access but the ACL entry for the user's group specifies Change access, the user has Change access.

Editing the ACL

To change the access type for an identity listed in the ACL, select an entry in the Permissions list and select an access type in Type of Access.

To add an entry to the ACL, click Add. In the Add Name dialog box, select an identity type and, where appropriate, enter the domain name and group name or user name. Select an access type in Type of Access, and then click OK.

Default ACL

By default, everyone has Read permission for the schedule and the ACL. On a local Windows host (the host where the scheduler is running), a member of the ClearCase group always has Full access. On a local UNIX host, the root user always has Full access. On a remote host, access rights of a member of the ClearCase administrators group or the root user are determined by the ACL. Thus, to change the default ACL, you must be logged on to the host where the scheduler is running, and you must be a local host administrator or member of the ClearCase administrators group (Windows host) or root (UNIX host).


Feedback