Ricoh InfoPrint Manager for AIX, Руководство пользователя

Страница: 144 / 418

For operations, there is only one level of permission: read . If a user has read
permission, they can do that action; if he does not, he cannot do the action. For
example, userB is a printer operator and must be able to move jobs to different
positions in the print queue because some jobs need to be printed before others.
You can give userB
read permission for the operation Reorder Job to allow him to
do his job. On the other hand, userC submits print jobs from his office workstation
and does not like to wait for the jobs ahead of his in the queue to print. If you
want to prevent him from moving jobs, do not put him on the ACL for the
Reorder Job operation. When he tries to move his job to the top of the queue, the
action will be denied.
When you install InfoPrint Manager, many operations are already protected so that
only members of the
admin
and
oper
groups can do them. You can see the ACLs
for operations in the Management Console by selecting the
Security-ACL-
Operations item in the left pane. If you want users to be able to do those
operations, you must either add those users to the individual ACLs or to a group
that has permission (either the existing admin and oper groups or a new group
that you create).
Note: If an object is protected, a user can only do an operation on that object if he
has both read permission for the operation and the appropriate level of permission
for the object. If the object is not protected, only users in the default admin or oper
groups are able to do the action. If a user is added to a non-standard group, they
are not able to do the action unless they are the owner of the job in question.
If the object has an ACL the permission needed depends on the operation. For
example,
List requires read, Set requires write, and Delete requires delete.
Security groups
No matter what size organization you work in, manually adding every user to
every ACL can be a time-consuming process. To reduce some of the work, you can
create
security groups , groups of users who need to have the same levels of
permission for the same objects. You use the name of the security group like a user
ID; instead of adding each user ID to an ACL, you add the group name. For
example, if you want all ten of your print operators to be able to perform the same
operations, create a group and name it
operators . Then, add operators to the
appropriate ACLs.
When you install InfoPrint Manager, three security groups are created by default:
v
acl_admin
Users who have authority to manage security by changing access control lists
and groups. The default members are
administrator and the user who was
logged on when InfoPrint Manager was installed.
v
admin
Users who have administrator authority. The default members are administrator
and the user who was logged on when InfoPrint Manager was installed.
v
oper
Users who have operator authority. The default member is
administrator
.
Notes:
1. There is another security group called JobTicketer that is created if you have
installed InfoPrint Job Ticketer as part of the Print-on-Demand feature. Unlike
130
InfoPrint Manager for AIX: Procedures