Server Configuration > Access Control List Permissions > Service Pack ACL
 
Service Pack ACL
For new installations of Integrity Lifecycle Manager server and Integrity Lifecycle Manager client, the mks:patch ACL allows users to download service packs. Service packs are checked for ACL matches in reverse numerical order where the newest service packs are checked first.
If you are upgrading your client from Integrity 4.2 or earlier, the mks:patch ACL must be added manually using the CLI.
For more information on managing client-side service packs, see “Distributing Client-side Service Packs”. Client-side service packs for distribution are held in ZIP format in a numbered subdirectory of the following server directory:
installdir/server/patches
When an Integrity Lifecycle Manager administration client or Integrity Lifecycle Manager client connects to the server, the user is notified if a service pack is available for download. Once the service pack is downloaded, the user is asked to restart the client. When the user completes these two steps, client operations can continue.
By default, the Download permission is allowed for the everyone group. This setting does not generally need to be changed.
To ensure that all users have access to service packs that are made available from the central Integrity Lifecycle Manager server, retain the default setting allowing the Download permission.
* 
If required, you can modify permissions for the mks:patch ACL using the CLI. For more information on changing permissions, see “Changing Permissions”.
For specific service pack ACLs, the format is mks:patch:C040300001-01. The Download permission must be allowed to the user or group.
If multiple service packs exist on the Integrity Lifecycle Manager server, they are checked for permissions from newest to oldest, for example, in the order C040300004-02, C040300004-01, to C040300003-01.
* 
To avoid confusion, a user or group should only have the Download permission for one service pack.
The Download permission is not required by users who only access the Integrity Lifecycle Manager server using the Web client. Web clients are hosted on the server and, therefore, are updated whenever the server is updated.
Users who access process and change management, or configuration management functionality using the GUI can also download any required service packs using the CLI. For more information on downloading service packs using the CLI, see the CLI man pages.