RBAC APIs

The RBAC-related APIs available on the system are listed in the following table. Please see the specific APIs for more information.

API	Description
checkauths	Compares the passed in list of authorizations to the authorizations associated with the current process.
GetUserAuths	Retrieves the set of authorizations assigned to the current process.
MatchAllAuths, MatchAllAuthsList, MatchAnyAuths, MatchAnyAuthsList	Compares authorizations. The checkauths API is preferred to these APIs.
getauthattr, putauthattr	Queries or modifies authorizations defined in the authorization database.
getauthattrs	Retrieves multiple authorization attributes from the authorization database.
putauthattrs	Updates multiple authorization attributes in the authorization database.
getcmdattr, putcmdattr	Queries or modifies the command security information in the privileged command database.
getcmdattrs	Retrieves multiple command attributes from the privileged command database.
putcmdattrs	Updates multiple command attributes in the privileged command database.
getdevattr, putdevattr	Queries or modifies the device security information in the privileged device database.
getdevattrs	Retrieves multiple device attributes from the privileged device database.
putdevattrs	Updates multiple device attributes in the privileged device database.
getpfileattr, putpfileattr	Queries or modifies the file security information in the privileged file database
getpfileattrs	Retrieves multiple file attributes from the privileged file database.
putpfileattrs	Updates multiple file attributes in the privileged file database.
getroleattr, putroleattr	Queries or modifies roles defined in the role database.
getroleattrs	Retrieves multiple role attributes from the role database.
putroleattrs	Updates multiple role attributes in the role database.
getsecorder	Retrieves the ordering of domains for certain security databases.
setsecorder	Sets the ordering of domains for certain security databases.