Netscape Certificate Management System 6.1, Administrator'S Manual, Page: 376 / 840

ACL Reference
376 Netscape Certificate Management System Administrator’s Guide • February 2003
Operations
Default ACIs
allow (read) group="Administrators" || group=”Certificate Manager
Agents” || group=”Registration Manager Agents” || group=”Data
Recovery Manager Agents” || group=”Online Certificate Status Manager
Agents” || group="Auditors"
allow (modify) group="Administrators"
Administrators, auditors, and agents are allowed to read RA configuration; only
administrators are allowed to modify RA configuration.
certServer.ra.certificate
Allow or deny an import, unrevoke, revoke, or read operation concerning
certificates in the agent services interface of a Registration Manager.
Operations
Default ACIs
allow (import,unrevoke,revoke,read) group="Registration Manager
Agents"
Registration Manager agents can import, unrevoke, revoke, and read certificates.
certServer.ra.connector
Allow or deny a submit operation for a connection to the RA.
read Viewing general RA configuration, connector configuration,
notification request completion, notification revocation completion,
and notification request in queue.
modify Modifying general RA configuration, connector configuration,
notification request completion, notification revocation completion,
and notification request in queue.
import Retrieving a certificate by serial number.
unrevoke Removing the revoked status from a certificate.
revoke Revoking certificates, or approving certificate revocation requests.
read Retrieving certificates based on associated request ID. Displaying
certificate details for a certificate, based on associated request ID