Controlling File Access

This section summarizes the features available for protecting files from examination or alteration by unauthorized parties and includes the following concepts:

  • Mechanisms for protecting files

  • Controlling group access to files

  • Controlling printing

  • Controlling tape file access

  • Protecting potentially hazardous files

Protected Files

The protection of two kinds of files is described here:

  • Disk files that are stored on disk packs

    The mechanisms for protecting disk files extend to printer files, which are files in the printing subsystem that are awaiting printing on a mechanical device.

  • Tape files that are stored on magnetic tape

The file protection methods described here do not apply to users or programs running under a privileged usercode. Only minimal security checking applies to file access by privileged users.

These methods also vary depending upon any granulated authorization granted to a user, especially the READ, WRITE, EXECUTE, CHANGE, and REMOVE privileges. Refer to Controlling System Access for a description of granulated authorization.