1 03/09/88  mailbox acls
 2 
 3 In MR12.1, the message segment primitives were changed to enforce
 4 some new restrictions on allowable mailbox and message segment
 5 extended ACLs.  Specifically:
 6   1. All ACL entries containing the "r" mode must also contain "s".
 7   2. All ACL entries containing either "w" or "u" mode must also
 8      contain "a".
 9 
10 Since both delete_acl and set_acl always call hcs_$replace_acl,
11 any segments with existing ACL entries which violate the new
12 restrictions cannot have their ACLs changed unless these old
13 inconsistent ACLs are changed at the same time.
14 
15 
16 For example, an existing mailbox with the ACL:
17 
18    adrow   GDixon.SysMaint.*
19    arow    Lippard.Multics.*
20    aow     *.*.*
21 
22 cannot be changed unless the entries for GDixon.SysMaint and
23 Lippard.Multics are changed at the same time.  This may be
24 accomplished in several ways.  With set_acl, you must specify new
25 modes for each of the bad ACL entries in a single command line:
26 
27    sa foo.mbx adrosw GDixon.SysMaint arosw Lippard.Multics
28 
29 With delete_acl, you must delete all of the bad ACL entries in a
30 single command line:
31 
32    da foo.mbx GDixon.SysMaint Lippard.Multics
33 
34 If there are a large number of bad ACL entries on a segment, you may
35 wish to delete them all and start over.  This may be easily
36 accomplished with the command:
37 
38    da foo.mbx ..