Ricoh InfoPrint Manager for AIX, Manual

Page: 143 / 418

Chapter 11. Managing security for InfoPrint Manager for AIX
InfoPrint Manager Security, a feature that you administer through SMIT, lets you
protect your printing system by associating an Access Control List (ACL) with an
InfoPrint object or operation. An ACL is the list of users and groups who have
permission to do something to or with an object, and what type of permission that
is.
Note:
InfoPrint Manager Security only uses the login ID permissions. Therefore, if
a user logs in and does an SU to root or to another user, the permissions associated
with the original login ID remain in effect.
Types of permission
In InfoPrint Manager, users can have three levels of permission: read , write , and
delete . The levels provide these types of access:
v
Read
For operations, the user can do the operation. For servers and queues, the user
can view the attributes. For destinations, the user can view attributes and submit
jobs to that destination.
v
Write
For all objects, the user can view and modify attributes.
v
Delete
For all objects, the user can view and modify attributes and can delete the object.
If you place userA on the ACL for the logical destination “print2ld” and give her
read permission, she can send her print jobs to it and can open the “print2ld”
object to see its properties. However, she cannot make changes to those properties.
If she tried to change any of them or tried to delete the destination, she would
receive an error message. If you decide that userA needs to be able to do more and
give her
write permission as well, she will be able to change the properties of
“print2ld,” but still will not be able to delete it.
Important: If you protect a destination (logical or actual) so that only certain users
can modify or delete its properties, you might inadvertantly prevent other users
from submitting print jobs to it. To be sure that all of your users can still print to
the destination, add the wildcard character (*) to the ACL as a user with read
permission.
You can also attach ACLs to the operations that you can do on InfoPrint objects.
Allowing you to protect both operations and objects means that InfoPrint Manager
Security provides different levels of security: you can protect all objects by using
ACLs at the operation level or you can protect individual objects with ACLs
applied only to them. Or you can do both: protect all objects by using
operation-level ACLs for some operations and limit access to sub-sets of objects by
using object-level ACLs.
All InfoPrint object names, including security groups and ACL members, are
case-sensitive.
© Copyright InfoPrint Solutions Company 1998, 2010
129