HP BB118BV - StorageWorks Data Protector Express Package, Руководство пользователя, Страница: 65 / 365

Chapter 4: Permissions 47
Supervisor
This is the most powerful permission. Supervisor permission grants the user three specific abilities:
•
First, a user with Supervisor permission to an object is automatically granted the other six
permissions to that object;
•
Second, a user with Supervisor permission to an object automatically has effective permission to all
the objects in the catalog below that object; and
•
Third, a user with Supervisor permission to an object cannot be denied any of the seven permissions
to any object in the catalog below that object.
The Data Protector Express administrator is automatically granted Supervisor permission to the highest
container in the Data Protector Express catalog hierarchy (called the System Container ). This means that
the Data Protector Express administrator has full permissions to all the objects in the Data Protector
Express catalog and that none of these permissions can be denied.
Often, only the Data Protector Express administrator will be assigned Supervisor permission.
Access
A user with
Access
permission to an object can grant other users and groups permissions to that object.
For example, if you wish to grant a co-worker permissions to a tape you have created, you must have
Access
permission to that tape.
Access
permission can be very powerful, since it allows a single user the ability to grant all other users in
the Data Protector Express catalog extensive permissions to an object. For this reason, your Data
Protector Express administrator may not grant you
Access
permission to objects even though you have
other permissions to them. For example, your Data Protector Express administrator may grant you
permission to read and write from a particular tape. Without
Access
permission however, you will not be
able to grant other users or groups that same ability.
You can only grant permissions to other users or groups if you have
Access
permission. If you want other
users to have permissions to an object, such as a job or tape, and do not have
Access
permission to that
object, ask your Data Protector Express administrator to grant these users permissions for you.
Create
This permission allows a user to create new objects within a container object. For example, to create a
new job within a folder, a user must have
Create permission to the folder. Note that the Create