Netscape Certificate Management System 6.1, Administrator'S Manual

Page: 379 / 840

ACL Reference
Chapter 8 Authorization 379
Operations
Default ACIs
allow (submit) user="anybody"
allow (read,execute,assign,unassign) group="Registration Manager
Agents"
Anyone can submit an enrollment request; only Registration Manager Agents can
read or execute requests.
certServer.ra.request.profile
Allow or deny an approve or read operation to a certificate profile-based request in
the agent services interface of a Registration Manager.
Operations
Default ACIs
allow (approve,read) group="Registration Manager Agents"
Registration Manager agents can view and approve certificate profile-based
requests.
certServer.ra.requests
Allow or deny a list operation for requests in the agent services interface of a
Registration Manager.
submit Submitting an enrollment request for processing.
read Viewing the details of an enrollment request.
execute Modifying the approval state of an enrollment request.
assign Assigning an enrollment request.
unassign Unassigning an enrollment request.
approve Modifying the approval state of a certificate profile-based request.
read Viewing a certificate profile-based request.