Date: Wed, 15 Feb 2012 10:01:38 -0500
Reply-To: Bolotin Yevgeniy <YBolotin@SCHOOLS.NYC.GOV>
Sender: "SAS(r) Discussion" <SAS-L@LISTSERV.UGA.EDU>
From: Bolotin Yevgeniy <YBolotin@SCHOOLS.NYC.GOV>
Subject: Re: OT, Windows file permission
In-Reply-To: A<D47ACC3DC1D6CA4D85DE61DC39DA319F0637C387@EX10MAIL2.westat.com>
Content-Type: text/plain; charset="us-ascii"
Note that the DOS ATTRIB command sets flags that are generally only a
suggestion, and are not enforced by the OS (i.e. an application has to
check for the read-only flag to be affected by it)
You might want to look at cacls or other existing tools (if on windows)
if you want to change permissions
-----Original Message-----
From: SAS(r) Discussion [mailto:SAS-L@LISTSERV.UGA.EDU] On Behalf Of
Mike Rhoads
Sent: Wednesday, February 15, 2012 8:14 AM
To: SAS-L@LISTSERV.UGA.EDU
Subject: Re: OT, Windows file permission
Another possible approach would be to use the DOS ATTRIB command at the
beginning and end of the SAS code to dynamically control the output file
attributes. You'd have to make sure to use something other than the
default LISTING output, since that isn't closed until the job ends. You
could do this either with PROC PRINTTO or by using one of the ODS output
destinations other than LISTING.
Mike Rhoads
RhoadsM1@Westat.com
-----Original Message-----
From: SAS(r) Discussion [mailto:SAS-L@LISTSERV.UGA.EDU] On Behalf Of
Arthur Tabachneck
Sent: Tuesday, February 14, 2012 8:29 PM
To: SAS-L@LISTSERV.UGA.EDU
Subject: Re: OT, Windows file permission
Ya,
You can always separate the data, programs and output, in separate
folders, so that a user only has read access to the first two. And, I
would think that you could assign passwords to the created output in
order for one to be able to modify the file.
Not fool proof, of course, but would add a rather inconvenient hurdle.
Art
-----
On Tue, 14 Feb 2012 19:14:49 -0500, Ya Huang <ya.huang@AMYLIN.COM>
wrote:
>Hi there,
>
>Sorry for the OT question. I googled and wasn't quite satisfied.
>My question is this: Is it possible to set certain folder's access to
>read and execute only? So that, someone can read all the file, but
>cannot change it. He also can run the SAS code inside the folder which
>will generate some outputs in another folder. Once the output file is
>created, he cannot change it by manually editing the file. He can still
>rerun the SAS code and overwrite the old output files. Since he cannot
>change the source code, the only difference will be the run time stamp.
>Also, he should not be able to delete the already generated files.
>
>My hunch is that is not possible, because if someone can create SAS
>output then he must have write permission, right?
>
>Thanks
>
>Ya
| 
