Look at this scenario: Unix/Linux Environment - NAT and NSC installed.
Goal: Protecting a library against any changes, however, the users can use only the commands: LIST, READ, SCAN, EDIT and CHECK.
Using NAT + NSC, it is possible to protect the commands and to allow only the commands listed above.
On Linux/Unix, SYSMAIN is available for all libraries, and using this utility, it is possible to Copy, Move, Rename and the worst, Delete objects.
If the environment has no NSC, I think there is no way to protect the commands.
For any situation, I can only see a way, changing some Linux/Unix authority, such as using FILEDIR.SAG as R W - R - - R - - .
So, thinking first on the scenario - NAT+NSC, does anyone know how to protect it with no changing on Unix/Linux settings?