SAS Safety Scalable Performance Data Server 4.5 사용자 설명서

4. If LIBNAME ACL permissions are defined for the accessor's group, the accessor gets

the LIBNAME ACL permissions on the object.

5. Else, the accessor gets UNIVERSAL ACLs on the resource.

An OWNER=<owner-name>LIBACLINHERIT=YES domain statement uses a slightly
different methodology because of the OWNER= parameter. When specifying the
OWNER= parameter with LIBACLINHERIT=YES, the owner can grant:

•

READ access to allow a user or group to get a LIBNAME to the domain.

•

ALTER access to allow a user or group to create new objects in the domain.

•

CONTROL access to allow a user or group to modify the owner's LIBNAME ACL.

ALTER access can be used with OWNER= and LIBACLINHERIT=YES to allow a user
or group to create a new resource in the domain. In some cases, ALTER access is preferable
to WRITE access for an OWNER= domain, because ALTER access prevents users or
groups that inherit WRITE access from writing to, updating, or deleting resources that were
created by the domain owner. LIBNAME ALTER access with OWNER= and
LIBACLINHERIT=YES allows the owner to grant privileges to users to create objects in
the domain, and WRITE access can be used to inherit write access to the owner's resources.

The following is an example of SAS code submitted to SPD Server using
LIBACLINHERIT. The example begins by showing information in the libnames.parm
file where domain names and paths are declared.

Contents of the libnames.parm file:

LIBNAME=libinher
PATHNAME=/IDX1/spdsmgr/spds45test/libinher
LIBACLINHERIT=YES
OWNER=admin ;

LIBNAME=noinher
PATHNAME=/IDX1/spdsmgr/spds45test/noinher
OWNER=admin ;

SAS code submitted to SPD Server by the user:

LIBNAME libinher sasspds 'libinher'
  server=gomez.5129
  user='admin'
  password='spds123' ;

LIBNAME noinher sasspds 'noinher'
  server=gomez.5129
  user='admin'
  password='spds123' ;

data libinher.admins_table
  noinher.admins_table ;

  do i = 1 to 10 ;
    output ;
end ;
run ;