3Com 10031370-01 Setup Manual Download Page 35

Page: 35 / 44

ECURITY

ERMISSION

XAMPLES

This chapter shows two example procedures. These samples build on concepts

discussed earlier in this guide.

Sample Sales

Permissions

This sample uses a group of users called

SrSales

and a group of attachments

called

SalesAttachments

. This sample explains how to change the permissions so

that only members of the

SrSales

group can use the attachments in the S

ales

Attachments

group.

For more information on creating groups, see Chapter 2, Working With Security

in this guide.

Performing the example requires three steps:

Remove the

SalesAttachments

default user permission from the group.

On the

Server Administrator

button menu, click

Setup Security

. The

Setup

Security

screen is displayed.

Sorted by User

is displayed, switch to

Sorted by Objects

Figure 3-1

Sort By Objects

Click the plus sign (+) to the left of

All Attachments

to expand the folder.

Summary of Contents for 10031370-01

Page 1: ...Communication Server Security Setup Guide CommWorks Ready Part Number 10031370 ...

Page 2: ......

Page 3: ...Communication Server Security Setup Guide CommWorks Ready Part No 10031370 01 Published November 2000 ...

Page 4: ... and included on such copies Licensee may not copy the documentation unless for use by network clients as a step in the deployment of the Software and for no other reason OWNERSHIP Ownership of and title to the Software and Documentation including any adaptation or copies shall be held by 3Com Copies are provided to Licensee only to allow Licensee to exercise its rights under the License TRANSFER ...

Page 5: ...EMEDY AND ALLOCATION OF RISK Licensee s sole and exclusive remedy is set forth in this agreement This agreement defines a mutually agreed upon allocation of risk and 3Com s prices and fees reflect such allocation of risk GENERAL CONDITIONS Governing Law This agreement shall be governed by and interpreted in accordance with the laws of the state of Illinois Entire Agreement This agreement sets fort...

Page 6: ...and Licensee s assurance of exceptional customer and technical services each license on a machine running 3Com Server software must be authenticated For Licensee s convenience Licensee can authenticate Licensee s license via fax phone or email The information required for authentication is stored in the server in a file called REGISTER TXT Please allow five days for authentication YEAR 2000 INFORM...

Page 7: ...sions 1 2 Security Glossary 1 3 Adding Members to Pre Defined User Groups 1 4 Pre Defined User Groups 1 5 Security Objects and Permissions 1 8 2 WORKING WITH SECURITY Starting Security2 1 Sorting Security Information 2 2 Setting Up Accounts 2 3 Setting Up Groups 2 6 Setting Up Security Permissions 2 8 Resetting Security 2 11 3 SECURITY PERMISSION EXAMPLES Sample Sales Permissions 3 1 INDEX ...

Page 8: ...viii ...

Page 9: ...tential loss of data or potential damage to an application system or device Convention Description Screen displays This typeface represents information as it appears on the screen Syntax The word syntax means that you must evaluate the syntax provided and then supply the appropriate values for the placeholders that appear in angle brackets Example To enable RIPIP use the following syntax SETDefaul...

Page 10: ...ard key names If you must press two or more keys simultaneously the key names are linked with a plus sign Example Press Ctrl Alt Del Words in italics Italics are used to Emphasize a point Denote a new term at the place where it is defined in the text Identify menu names menu commands and software button names Examples From the Help menu select Contents Click OK Convention Description ...

Page 11: ...sts and attachments are objects User profiles and modems are also objects Permissions and Objects Permissions determine who can do what to each object The security permissions for server supervisors are fixed You cannot change the permissions nor delete the user group This ensures that the server always has someone that can work with users Server Setup and Security permissions When the server supe...

Page 12: ...d by another user who belongs to the same account but would have no access to phonebooks created by users who belong to a different account Each account has its own administrator Administrators have all powerful privileges to things e g end users and fax jobs which belong to their own account but no privileges to things that belong to another account Groups Setting up and managing security is easi...

Page 13: ...y object that users can create or is owned by them has a group labeled Owned By Self This group gives the creator or owner of an object more permissions for objects they own than for objects that are owned by other people Some objects that users create are faxes attachments and cover pages Some objects users own are received faxes and their user profile Member Each group of users or objects can ha...

Page 14: ...nd define new users Assistants also have irrevocable permissions however since the assistant s permissions depend on another user s permissions the assistant user level is not listed as a pre defined User group Assistants have the same permissions to fax jobs as the user they assist Icon Name Icon Name Server Modems Attachments Phonebooks Cover Pages User Profiles Account s Server Setup Fax Jobs U...

Page 15: ...ey assist Pre defined User groups provide the structure for the security module This section discusses the pre defined User groups and explains their default and irrevocable permissions If you want to add and remove members for the pre defined User groups you can do so using the User Properties dialog In addition to the pre defined groups and their permissions you can add individual members to sub...

Page 16: ... supervisor need not be an administrator in these new accounts Therefore the server supervisor would not need to view faxes owned by the various corporate client accounts 4 The account administrator for each account would be an employee of each corporate client The account administrator would therefore be able to administer faxes which are owned by that corporation and able to administer the users...

Page 17: ...d for review by their manager when defined on the server Authorize Send Users have all permissions to their own fax jobs All Fax Jobs Owned By Self All Folders All users can list the folder as well as view faxes add faxes and delete faxes from a folder Users have all permissions to their own folders All Folders Owned By Self Attachments that are saved into network subfolders are controlled here in...

Page 18: ...the List Permission for cover pages there will never be a cover page visible to select Another dependency appears when you want to view or change a dialog that is accessed from the User Properties dialog such as User Preferences You cannot access the User Properties dialog without the granted permission to View Permission Definitions by Object This section lists actions that can be taken on object...

Page 19: ...Move to Another User Move the fax to another user by changing the fax s owner or routing a received fax to another user Pause Fax Job Pause a fax from the Send Log Purge Fax Job Permanently remove faxes marked as deleted from the Send Log or Receive Log Resubmit Change and resend a fax from the Send Log or Receive Log Unpause Resume Fax Job Resume a fax that is currently paused from the Send Log V...

Page 20: ...onebook window and Fax Send dialog Other Phonebook Permissions are only useful when you have the List Permission Rename Phonebook Change the name of the phonebook or phonebook group in the Phonebook window Send To Phonebook Use the phonebook phonebook group or individual phonebook recipients when addressing faxes using the Fax Send dialog View Contents View the detailed recipient information from ...

Page 21: ... new users to the server using the Add Users dialog Edit Auto Routing Table Create change and remove entries on the Auto Routing Table Monitor Server Status View the Fax Server Monitor dialog Pause Resume all Server Modems Pause and Resume all Fax modems on the server from the Fax Server Monitor dialog View Edit Security Setup Display and change groups and permissions using the Security module ser...

Page 22: ......

Page 23: ...start the Security Setup window the fax server must be running 1 From the Microsoft Start button click Programs 2 Click 3Com Corporation 3 Click Server Administrator 4 Connection to the fax server will begin automatically If connection screens are configured to Show press Connect in the Server Connection screen and sign in with administrator permissions 5 Click Setup Security from the main options...

Page 24: ... is possible to connect to a different server by selecting from the list Add New User The Add Users screen appears Once the user name is entered the User Properties screen appears Cost Centers If using billing numbers for invoicing this command will allow assignment of numbers Exit Save all changes and close the Security Setup screen Command Name Description By Users Use this to view and edit perm...

Page 25: ...ount is for User Records which are created automatically by the server including accounts on the network that identify remote servers and database files Subsequent new accounts can be established when a new user is created Creating Users and Accounts A new user is created by the Server Supervisor or the Accounts Supervisor At the time when the user is created it is associated with the same Account...

Page 26: ...settings Authentication Set in previous screen No settings Subdirectory A folder is created based on the user s name No settings Unique ID A unique number is generated for this user No settings Password Confirm This can be set now or later User s Machine Name Use this identification if the user will receive alert messages Permissions Enable as many checkboxes as are appropriate Even the Server Sup...

Page 27: ...t is created The new user is established as the Account Administrator of this new account Manager Identify the new user s manager if listed To make the new user the manager of this account click the Manager checkbox in Permissions The name will appear in the list for subsequent new users Billing Code If billing code is used it will appear here SQL Phonebook Restrictions These fields will not be en...

Page 28: ... users By default users inherit the permissions of all the user groups to which they belong By grouping objects the same permissions for the group of objects can be assigned to users or user groups The following procedures will be described below Creating a User Defined Group Managing Groups Adding and Deleting Members Deleting a User Defined Group Creating a User Defined Group 1 From the Security...

Page 29: ...mbers to an Established User defined Group 1 From the Security Setup dialog select the group you want to use 2 From the Change menu select Add Group Members The Add Members to Group window appears as in Figure 2 6 above 3 Select the users from the list and click Add Member to include them in the list Deleting Members 1 In Security Setup select the group you want to use 2 Double click the group to ...

Page 30: ...d remove permissions from the Security Setup screen These permissions determine who can do what to each object Create permissions for individuals or groups of users Whether sorted by user or by object the result is the same For example permissions for Fax Users to All Modems are identical to permissions for All Modems for Fax Users The permission stays with the user regardless of where the permiss...

Page 31: ...roup Change one or two permissions to perform the next step Figure 2 10 Changed Permissions 7 Close the Developers Permissions screen 8 Change to Sort by Object 9 Expand the All Fax Jobs group 10 Expand the All Fax Jobs Owned by Self group 11 Click Developers 12 Click Permissions to open the Permissions screen Figure 2 11 User Permissions by Object Group 13 The screen should be the same as the pre...

Page 32: ...ssion So what happens when a user belongs to more than one group and the permissions of one group grant something while the other denies it Here is a fictitious example Bill Gallagan belongs to the JrSales group and the Developers group Here are the inherited permissions for All Attachments for both groups Figure 2 12 All Attachments Permissions by User Group Delete Attachments is permitted in the...

Page 33: ...etting Security The entire security module can be re set back to default settings Resetting is an all or nothing option so unless you want to return to the pre defined settings you should use the security module to make corrections To reset security and return to the pre defined setup 1 Stop the fax server if it is running 2 In Windows Explorer open the server directory 3 One of the server s subdi...

Page 34: ......

Page 35: ...the SrSales group can use the attachments in the Sales Attachments group For more information on creating groups see Chapter 2 Working With Security in this guide Performing the example requires three steps 1 Remove the SalesAttachments default user permission from the group a On the Server Administrator button menu click Setup Security The Setup Security screen is displayed b If Sorted by User is...

Page 36: ...om the Sorted By Objects window click SalesAttachments b Double click the group to display the users Select the SrSales group c Click Permissions Change the Use Attachment permission by clicking it and clicking Change Permission Figure 3 3 Permission Changed d The permission is now explicitly and exclusively granted to SrSales 3 Inspect that permissions are assigned correctly a In the Setup Securi...

Page 37: ...ttachments cannot be used by this group Figure 3 4 Development Permissions e Open the SrSales group f Open the All Attachments folder and click on SalesAttachments Figure 3 5 SrSales Permissions g Click Permissions to see that these attachments can be used by this group ...

Page 38: ...ich a user belongs by selecting the user and clicking Groups Which Contain from the Change menu 2 Under All Attachments select Sales Attachments and click Permissions 3 Make sure the Use Attachment permission is denied Figure 3 6 SalesAttachment Permissions 4 Now select a member of the SrSales group 5 Select SalesAttachments and click Permissions to make sure the Use Attachment permission is grant...

Page 39: ...7 Click Change Permissions to allow this user use of the SalesAttachments Figure 3 7 SalesAttachment Permissions Changed ...

Page 40: ......

Page 41: ... 10 Delete Fax Job definition 1 9 Delete From Folder definition 1 9 Delete Phonebook Item definition 1 10 Delete User definition 1 10 Dependencies 1 8 Dialing Restrictions user properties 2 5 E Edit Auto Routing Table definition 1 11 Edit Contents definition 1 10 Edit Dialing Restrictions definition 1 11 Edit Pre Defined Groups definition 1 10 Edit User Preferences definition 1 10 Edit User Profil...

Page 42: ...Objects permission reference 1 8 Security Objects and Permissions 1 8 Security Permissions setup 2 8 Send To Phonebook definition 1 10 Server Setup permission definition 1 7 reference 1 11 Server Supervisors Group definition 1 5 Setting Up Groups 2 6 Setting Up Security Permissions 2 8 Sorting Security Information 2 2 SQL Phonebook Restrictions user properties 2 5 Starting Security 2 1 Subdirector...

Page 43: ......

Search results

Summary of Contents for 10031370-01

Reviews:

Brands by name

Popular brands

3Com 10031370-01, Setup Manual

Search results

Summary of Contents for 10031370-01

Reviews:

Brands by name

Popular brands