ACls also come to mind?
What are Access Control Lists (ACLs)?
ACLs are an extension to standard permission bits. They allow fine grain control for
each file or directory by modifying the standard permissions that are assigned to
individuals or groups. There are three assignments you can make for each group or user: PERMIT Grants the specified access to the file or directory.
DENY Restricts the specified access to the file or directory.
SPECIFY Precisely defines the file or directory access.
NOTE: If a user is denied a particular access by either a deny or a specify
keyword, no other entry can override that access denial.
The acledit command is used to create an ACL. First you must set the EDITOR/
environment variable with the full path to your favorite text editor. For example:
export EDITOR=/usr/bin/vi.
Then use:
acledit file_name
This will bring up a screen like:
attributes:
base permissions
owner(rcunning): rwx
group(staff): r--
others: ---
extended permissions
disabled
To set the extended permissions, change the disabled setting to enabled:
extended permissions
enabled
Use the permit, deny or specify keywords to define the extended permissions. The
preceding example shows that only the owner can write to this file. The group staff
can read the file and other has no permissions. To allow user joe to read and write
the file, use:
extended permissions
enabled
permit rw- u:joe
To allow group joegroup to read the file, use:
permit r-- g:joegroup
You can fine tune the permissions by combining the multiple entries on the same
line. If you want to give pete read and write access ONLY, and if he is currently
part of the system group, use:
permit rw- u

ete, g:system
To add permissions for several users or groups, use separate lines:
permit rw- u:joe
permit rw- u

ete
Further information on the acledit command appears in InfoExplorer for AIX
Version 4.2 and earlier or the man pages.
Two other ACL commands can be used, aclget and aclput:
aclget file_name outputs the permissions to standard out.
aclget file_name file_with_permissions sets ACLs on file file_name from file
file_with_permissions.
To copy the ACLs from one file to another, use:
aclget <file_name> | aclput <new_file_name>
Use the ls -el command to see if an ACL is set on a file. For example,
the ls -el .profile command shows:
-rwxr-----+
The + in the last position means the file has an ACL enabled.
CAUTION: Using the chmod command with numeric arguments will disable
the ACL for a file or directory.