Best practice to allow access to owner user and admins only?

最好的做法，允许访问用户和管理员只拥有？

Pam_deny and pam_permit are basic and always deny or allow access.

pam_deny和pam_permit是基本模块，分别拒绝或允许访问。

The classes also allow access to information about a message on a message queue.

这些类还允许访问关于消息队列上的某条消息的信息。

Applications can allow access of their files to other applications or processes.

应用程序可以允许其他应用程序或进程访问它们的文件。

These classes allow access to IBM I file resources, both database files as well as IFS files.

这些类允许访问IBM i文件资源—数据库文件和IFS文件。