Representation of custom actions and action groups

Use a special syntax to identify custom action bits that belong to action groups other than the primary action group. The primary action group is the default action group.

As described in ACL entries, ACL entries contain an entry type, an ID for user and group types, and the set of permissions (action bits). Permissions that represent the action bits from multiple action groups are presented in the following format:

bits[group_1]bits_1...[group_n]bits_n

The following example is an example of the permissions attribute:

abgTr[groupA]Pq[groupB]Rsy[groupC]ab

The previous permissions attribute has the following interpretation:

• The primary action group contains the a, b, g, T, and r action bits.
• The groupA action group contains the P and q action bits.
• The groupB action group contains the R, s, and y action bits.
• The groupC action group contains the a and b action bits.

Action group groupC contains action bits using the same letters for action bits as used in the primary action group. The action bits are associated with a specific action group (groupC). The a and b action bits have unique identities and can represent different permissions from those action bits in the primary action group.

Parent topic: Custom permissions in custom action groups