NAME

       lfc_setacl - set LFC directory/file access control lists

SYNOPSIS

       #include <sys/types.h>
       #include "lfc_api.h"

       int lfc_setacl (const char *path, int nentries, struct lfc_acl *acl)

DESCRIPTION

       lfc_setacl sets the Access Control List associated with a LFC directory/file.

       path   specifies  the  logical  pathname relative to the current LFC directory or the full
              LFC pathname.

       nentries
              specifies the number of entries present in the buffer.

       acl    is a pointer to an array of lfc_acl structures provided by the application.

       struct lfc_acl {
               unsigned char   a_type;
               int             a_id;
               unsigned char   a_perm;
       };

       a_type is the ACL type: CNS_ACL_USER_OBJ, CNS_ACL_USER, CNS_ACL_GROUP_OBJ,  CNS_ACL_GROUP,
              CNS_ACL_MASK  or  CNS_ACL_OTHER.   Types for default entries are obtained by OR'ing
              the flag CNS_ACL_DEFAULT with one of the above types.

       a_id   is the user or group numeric id.

       a_perm is the access permission in numeric form  obtained  by  OR'ing  some  of  the  bits
              S_IROTH, S_IWOTH, S_IXOTH.

       The  effective  user ID of the process must match the owner of the file or the caller must
       have ADMIN privilege in the Cupv database.

RETURN VALUE

       This routine returns 0 if the operation was successful or -1 if the operation  failed.  In
       the latter case, serrno is set appropriately.

ERRORS

       EPERM        The  effective  user  ID  does not match the owner of the file and the caller
                    does not have ADMIN privilege in the Cupv database.

       ENOENT       The named file/directory does not exist or is a null pathname.

       EACCES       Search permission is denied on a component of the path prefix.

       EFAULT       path or acl is a NULL pointer.

       ENOTDIR      A component of path prefix is not a directory.

       EINVAL       nentries is not greater than zero or is greater than CA_MAXACLENTRIES or  the
                    ACL entries are not valid.

       ENOSPC       The name server database is full.

       ENAMETOOLONG The  length  of  path exceeds CA_MAXPATHLEN or the length of a path component
                    exceeds CA_MAXNAMELEN.

       SENOSHOST    Host unknown.

       SENOSSERV    Service unknown.

       SECOMERR     Communication error.

       ENSNACT      Name server is not running or is being shutdown.

SEE ALSO

       Castor_limits(4), lfc_chdir(3), lfc_chmod(3), lfc-setacl(1)

AUTHOR

       LCG Grid Deployment Team