2.5. The SNMPv2 Access Privileges Database Group

   -- the SNMPv2 access privileges database group

   snmpAccess     OBJECT IDENTIFIER ::= { partyMIBObjects 3 }

   aclTable OBJECT-TYPE
       SYNTAX      SEQUENCE OF AclEntry
       MAX-ACCESS  not-accessible
       STATUS      current
       DESCRIPTION
               "The access privileges database."
       ::= { snmpAccess 1 }

   aclEntry OBJECT-TYPE
       SYNTAX      AclEntry
       MAX-ACCESS  not-accessible
       STATUS      current
       DESCRIPTION
               "The access privileges for a particular subject
               SNMPv2 party when asking a particular target
               SNMPv2 party to access a particular SNMPv2
               context."
       INDEX      { aclTarget, aclSubject, aclResources }
       ::= { aclTable 1 }

   AclEntry ::=
       SEQUENCE {
           aclTarget        INTEGER,
           aclSubject       INTEGER,
           aclResources     INTEGER,
           aclPrivileges    INTEGER,
           aclStorageType   StorageType,
           aclStatus        RowStatus
       }

   aclTarget OBJECT-TYPE
       SYNTAX      INTEGER (1..65535)
       MAX-ACCESS  not-accessible
       STATUS      current
       DESCRIPTION
               "The value of an instance of this object
               identifies a SNMPv2 party which is the target of
               an access control policy, and has the same value
               as the instance of the partyIndex object for that
               party."
       ::= { aclEntry 1 }

   aclSubject OBJECT-TYPE
       SYNTAX      INTEGER (1..65535)
       MAX-ACCESS  not-accessible
       STATUS      current
       DESCRIPTION
               "The value of an instance of this object
               identifies a SNMPv2 party which is the subject of
               an access control policy, and has the same value
               as the instance of the partyIndex object for that
               SNMPv2 party."
       ::= { aclEntry 2 }

   aclResources OBJECT-TYPE
       SYNTAX      INTEGER (1..65535)
       MAX-ACCESS  not-accessible
       STATUS      current
       DESCRIPTION
               "The value of an instance of this object
               identifies a SNMPv2 context in an access control
               policy, and has the same value as the instance of
               the contextIndex object for that SNMPv2 context."
       ::= { aclEntry 3 }

   aclPrivileges OBJECT-TYPE
       SYNTAX      INTEGER (0..255)
       MAX-ACCESS  read-create
       STATUS      current
       DESCRIPTION
               "The access privileges which govern what
               management operations a particular target party
               may perform with respect to a particular SNMPv2
               context when requested by a particular subject
               party.  These privileges are specified as a sum of
               values, where each value specifies a SNMPv2 PDU
               type by which the subject party may request a
               permitted operation.  The value for a particular
               PDU type is computed as 2 raised to the value of
               the ASN.1 context-specific tag for the appropriate
               SNMPv2 PDU type.  The values (for the tags defined
               in [5]) are defined in [3] as:

                Get         :   1
                GetNext     :   2
                Response    :   4
                Set         :   8
                unused      :  16
                GetBulk     :  32
                Inform      :  64
                SNMPv2-Trap : 128

               The null set is represented by the value zero."
       DEFVAL      { 35 }      -- Get, Get-Next & Get-Bulk
       ::= { aclEntry 4 }

   aclStorageType OBJECT-TYPE
       SYNTAX      StorageType
       MAX-ACCESS  read-create
       STATUS      current
       DESCRIPTION
               "The storage type for this conceptual row in the
               aclTable."
       DEFVAL      { nonVolatile }
       ::= { aclEntry 5 }

   aclStatus OBJECT-TYPE
       SYNTAX      RowStatus
       MAX-ACCESS  read-create
       STATUS      current
       DESCRIPTION
               "The status of this conceptual row in the
               aclTable."
       ::= { aclEntry 6 }