Editing Access-control list (section)

{{Short description|List of permissions for a system resource}}
In [[computer security]], an '''access-control list''' ('''ACL''') is a list of permissions{{efn|E.g., [[File-system permissions]], permission to perform specific action.}} associated with a [[system resource]] (object or facility). An ACL specifies which [[User (computing)|users]] or [[Process (computing)|system processes]] are granted access to resources, as well as what operations are allowed on given resources.<ref>{{cite IETF 
 | rfc         = 4949
 | title       = Internet Security Glossary, Version 2
 | author      = R. Shirey
 | date        = August 2007
 | access-date = May 19, 2023
 }}
</ref> Each entry in a typical ACL specifies a subject and an operation.  For instance, 
* If a file object has an ACL that contains{{samp|(Alice: read,write; Bob: read)}}, this would give Alice permission to read and write the file and give Bob permission only to read it.
* If the [[Resource Access Control Facility]] (RACF) profile CONSOLE CLASS(TSOAUTH) has an ACL that contains{{samp|(ALICE:READ)}}, this would give ALICE permission to use the TSO CONSOLE command.