Ricoh InfoPrint Manager for AIX, Руководство пользователя

Страница: 145 / 418

the other groups, there are no default users created during installation. See
InfoPrint Job Ticketer: Administrator's Guide for more information.
2.
You can modify these groups as needed. In the example above, you could have
simply added your operators to the default
oper group and modified any
permissions that weren't set to the level that you wanted them.
3. All fields, such as User IDs, group names, hostnames, and DNS suffixes, are
case sensitive.
You can add users to multiple groups, but you cannot make one group a member
of another group. For example, if you hire five new print operators, you might
create a group for them called
trainees
, since you only want them to have limited
permissions until they are finished with their training. When they finish their
training, you cannot add
trainees
as a member of the
operators
group. You will
have to add their user IDs to the operators group one at a time. In addition, you
will have to either delete the
trainees group or delete the members from
it—otherwise those users will have conflicting levels of permission.
When users are members of more than one group and each group has a different
level of permission for a particular object, the most restrictive permission applies.
In the example above, if you forgot to remove the new employees from the
trainees group at the end of their training, they wouldn't be able to perform the
tasks their job required- they would still be restricted.
Identifying users and groups: wildcarding
When you add users to ACLs or Security groups, you identify them by their user
ID and the computer that they work on in this format:
username @ computername .
The permissions you assign will only apply when that person accesses InfoPrint
Manager from that workstation.
If, however, you or any of your users want to be able to work with InfoPrint
Manager objects from various workstations, you might not want to add multiple
user ID/computer name combinations for the same person—you can use
wildcarding instead. When you use wildcarding, you replace the computer name
or user ID with the wildcard character (*) when you add a member to an ACL or
Security Group. The wildcard character stands for “any computer” or “any user
ID.” So, if you create an ACL member called
administrator@* , no matter what
computer you log on to as administrator , you have the same permissions. If you
use the wildcard character before the computer name, for example *@computer ,
any user who logs on to computer1 can do the actions that the ACL member has
permission for.
Working with ACLs and groups
Use the AIX SMIT utility to manage the security of your print system. Open an
AIXterm window and enter
smit
on the command line. The line InfoPrint Printing
System will appear as an option. By following the menu item to the right with
your cursor, you can navigate the this directory structure of menu choices:
Tab #1 Tab #2 Tab #3 Choices
InfoPrint Printing Systems
→
Security
→
Groups
→
Add Group
Show Group
Add User to Group
Remove User from
Group
Chapter 11. Managing security for InfoPrint Manager for AIX
131