Access Control Action Set: Syntax

Provides actions for managing user access to resources

operActionMd Action

Adds, deletes, and modifies action metadata.

accessControl.operActionMd <result=results> <status=rc> /
required parameter action="string",
required parameter actionSet="string",
description="string",
directAc=TRUE | FALSE,
newName="string",
system=TRUE | FALSE,
required parameter task="ADD" | "DELETE" | "UPDATE"
;
indicates a required parameter

Parameter Descriptions

* action="string"

specifies the action name.

* actionSet="string"

specifies the action set name.

description="string"

specifies the purpose of the access control.

directAc=TRUE | FALSE

when set to True, access is denied unless it is directly granted. By default, access can be granted either directly or through inheritance.

DefaultFALSE

newName="string"

specifies the new name of an existing object in metadata.

system=TRUE | FALSE

when set to True, the object is not checked for access controls. This is useful for low-level action sets and actions that are always required, such as starting a session and setting session options.

DefaultFALSE

* task="ADD" | "DELETE" | "UPDATE"

specifies the operation to perform.

DefaultADD

operActionMd Action

Adds, deletes, and modifies action metadata.

results, info = s:accessControl_operActionMd{
required parameter action="string",
required parameter actionSet="string",
description="string",
directAc=true | false,
newName="string",
system=true | false,
required parameter task="ADD" | "DELETE" | "UPDATE"
}
indicates a required parameter

Parameter Descriptions

* action="string"

specifies the action name.

* actionSet="string"

specifies the action set name.

description="string"

specifies the purpose of the access control.

directAc=true | false

when set to True, access is denied unless it is directly granted. By default, access can be granted either directly or through inheritance.

Defaultfalse

newName="string"

specifies the new name of an existing object in metadata.

system=true | false

when set to True, the object is not checked for access controls. This is useful for low-level action sets and actions that are always required, such as starting a session and setting session options.

Defaultfalse

* task="ADD" | "DELETE" | "UPDATE"

specifies the operation to perform.

DefaultADD

operActionMd Action

Adds, deletes, and modifies action metadata.

results=s.accessControl.operActionMd(
required parameter action="string",
required parameter actionSet="string",
description="string",
directAc=True | False,
newName="string",
system=True | False,
required parameter task="ADD" | "DELETE" | "UPDATE"
)
indicates a required parameter

Parameter Descriptions

* action="string"

specifies the action name.

* actionSet="string"

specifies the action set name.

description="string"

specifies the purpose of the access control.

directAc=True | False

when set to True, access is denied unless it is directly granted. By default, access can be granted either directly or through inheritance.

DefaultFalse

newName="string"

specifies the new name of an existing object in metadata.

system=True | False

when set to True, the object is not checked for access controls. This is useful for low-level action sets and actions that are always required, such as starting a session and setting session options.

DefaultFalse

* task="ADD" | "DELETE" | "UPDATE"

specifies the operation to perform.

DefaultADD

operActionMd Action

Adds, deletes, and modifies action metadata.

results <– cas.accessControl.operActionMd(s,
required parameter action="string",
required parameter actionSet="string",
description="string",
directAc=TRUE | FALSE,
newName="string",
system=TRUE | FALSE,
required parameter task="ADD" | "DELETE" | "UPDATE"
)
indicates a required parameter

Parameter Descriptions

* action="string"

specifies the action name.

* actionSet="string"

specifies the action set name.

description="string"

specifies the purpose of the access control.

directAc=TRUE | FALSE

when set to True, access is denied unless it is directly granted. By default, access can be granted either directly or through inheritance.

DefaultFALSE

newName="string"

specifies the new name of an existing object in metadata.

system=TRUE | FALSE

when set to True, the object is not checked for access controls. This is useful for low-level action sets and actions that are always required, such as starting a session and setting session options.

DefaultFALSE

* task="ADD" | "DELETE" | "UPDATE"

specifies the operation to perform.

DefaultADD
Last updated: February 25, 2026