As above
When adding a privilege to a user for a specific group the "-group" option is omitted, instead of displaying a syntax error, hauser assigns clusterwide rights to the user for the given privilege:
With -group option "as designed":
# hauser -addpriv username Administrator -group grpname
username : GroupAdministrator for group(s) ( grpname )
Without -group option:
# hauser -addpriv username Administrator grpname
username : ClusterAdministrator
The -group
If -group is not mentioned in -addpriv, then the rest of the strings are ignored by the CLI.
Due to an error in validating the arguments in the command line interface (CLI), it does not error out with syntax error when "-" in "-group" is not specified. Instead it adds Cluster wide privileges for the user.
This issue is tracked via Veritas internal incident # 3207663 and is planned to be fixed in upcoming releases:
Applies To
This issue is applicable to all versions of VCS on all UNIX/Linux platforms.