Access Policy

The Access Policy is a list of subjects and their associated access levels. The Access Policy is applied to new objects as they are created. The Access Policy can also be updated on existing Science Data Objects with setaccess.

Use the get command without any parameters to view the current Access Policy.

allow <subject> [access level]

Allow access to subject. If access level is not provided, it defaults to read. Valid access levels are: read, write, changePermission, execute and replicate. Any access level implicitly includes less permissive levels. E.g., giving changePermission to a subject implicitly gives read and write permissions as well.

deny <subject>

Remove subject from Access Policy.

allowpublic

Allow public read.

denypublic

Deny public read.

denyall

Remove all subjects from Access Policy and deny public read. Only the submitter will have access to the object.