Creating ACLs via command-line

Question

Is it possible to create ACLs using a command-line utility?
We are developing an application that will initially have 5000 users and will expand to 15000 users.
When new users are detected in Microsoft Exchange we create a new user using the command-line (unix) but we also need to create a custom ACL for that user that includes existing ACEs for existing GROUPS that will be providing support.
This is so that we can drop new Oracle reports into the users folders (again using command-line utilities) and have the reports use the ACL from the folder they are dropped into.
Thanks for any help.
null

Answer 1

Thanks for your response Tom. See my post above 15 items down labeled 'TAR submitted ...'.
Oracle provided sample code (listed in the above mentioned POST) that works just fine to create ACLs.
I am very interested in your suggestion to us an agent though because there does not appear to be any way to 'manage' objects (delete groups/acls, etc) through XML.
Also, Joyce indicated several weeks ago that Oracle does not support loading the class files and using Java from with Oracle DB to manage the objects.
Our application will rollout in a few weeks and we still need to automate the management of user creation/deletion as well as ACL modification for over 5,000 users.
The application is to automate the production and distribution of weekly reports using Oracle Reports server to produce PDF report files.
The biggest problem area is not the mechanical process of creating the reports but rather the proper architecture to enable our customer service and technical support departments to assist the users when problems arise.
Our current approace is:
1. Create a custom ACL for each user with ACEs that allow the proper access by tech support and customer service.
2. Create a report folder for each user, owned by system with the user's custom ACL applied to it.
3. Automatically generate the reports with Oracle Reports server, and load them into IFS using XML files. Prior to the load IFSMODE is used to have the user's report folder ACL (the PARENT) assigned to the report when it is loaded.
We would like tech support to be able to rerun a user's report if necessary but we can't figure out how to let tech support use the UI to submit the job to the report server, load the report into IFS and assign the proper ACL.
Will the soon-to-be-released IFS 1.1 allow its Java classes to be loaded in the soon-to-be-released 8.1.7 so that IFS management can be handled from within the database?
One last note - there are at least a dozen requests in this forum for more extensive documentation on using XML to automate the IFS functionality.
I would be willing to assist in any such project you guys put together including, writing or proofing documentation, testing sample code, etc. I would need to do this after hours on my NT environment.
Thanks again for the response.
null