Order of object definition
You must order object definitions from most specific to least specific,
in the same way as for user attributes. For example,
- Incorrect
-
In this case, a job with the name beginning with "ar" would satisfy the first definition, and so would be given the display access, not all access.job name=@ access=display job name=ar@ access=@
- Correct
-
job name=ar@ access=@ job name=@ access=display
Ensure that you order object definitions from most specific to least specific also when
you use the Continue
keyword.
The Continue
keyword allows a user to inherit authorization from multiple
stanzas. The user receives accesses as defined in the first matching entry of each
stanza that matches the user definition. For an example of a security file with the
Continue
keyword, see Users logged into multiple groups [continue keyword]