A SERVICE OF

logo

add ACL / LIBNAME ;
/* Allow any user in same group */
/* as admin to read, write, or */
/* alter tables in the domain */
modify ACL / LIBNAME
admingrp=(y,y,y,n)
group1=(y,n,n,n)
group2=(y,n,n,n)
group3=(y,y,n,n)
group4=(y,y,n,n) ;
list ACL _all_;
run;
/* admin1 has write privileges to */
/* the domain */
data d1.admin1_table1 ;
do i = 1 to 100 ;
output ;
end ;
run ;
/* Generic ACL allows all users to */
/* read tables created by admin1 */
PROC SPDO library=d1 ;
/* assign who owns the ACLs */
set acluser admin1 ;
/* Modify LIBNAME for groupread */
/* and groupwrite. The ACL MUST */
/* inlcude groupread if other */
/* users in the same group as */
/* admin2 need to be able to read */
/* tables that were created by */
/* admin2. */
add ACL admin1_table1 /
generic
read
groupread
groupalter ;
list ACL _all_;
run;
/* admin1 has write privileges to */
/* the domain */
178 Chapter 14 ACL Security Overview