Realm Access Control List (nACL)

When you have connected to a realm, and have a reference to an nRealmNode object (see nRealmNode), you can access an the realm's acl object. This object contains a list of nRealmACLEntry objects that represent a subject and a set permissions for various operations on a realm.

You can also, add, delete and modify acl entry objects. To obtain the realm acl object, simply call the following method from a realm node:

Java, C#:

nACL acl = realm.getACLs();

C++:

nACL* acl = realm->getACLs();

nRealmACLEntry

Once you have the acl object, you can then add, remove or modify acl entries:

To find a specific acl entry from the realm acl, you can search the acl using the subject. For example, if I wished to change the default permissions for the *@* subject (i.e. the default permission for a realm), I could use the following code:

nRealmACLEntry entry = acl.find("Everyone");
entry.setFullPrivileges(false);
acl.replace(entry);
realm.setACLs(acl);

C++:

nRealmACLEntry* entry = acl->find("Everyone");
entry->setFullPrivileges(false);
acl->replace(entry);
realm->setACLs(acl);

which would set the full privileges flag to false for the default subject.

For more information on Universal Messaging Administration, please see the API documentation, and the Enterprise Manager Guide.