Ricoh InfoPrint Pro C900AFP InfoPrint Manager - Page 47

Chapter 7. Managing security InfoPrint Manager security is a feature that you administer through the InfoPrint Manager Management Console. It lets you protect your printing system by associating an Access Control List (ACL) with an InfoPrint object or operation. An ACL is the list of users and groups who have permission to do something to or with an object, and what type of permission that is. Important: InfoPrint Manager Security references the login ID of the current user to determine who is attempting to perform an action. Otherwise, the InfoPrint Manager security system is entirely separate from any Windows security you have set. For example, you cannot use groups that you create with the Windows User Manager in InfoPrint Manager Security- you must create security groups using the InfoPrint Manager Management Console. If you do not want to use InfoPrint Manager Security, you can turn it off using the server properties notebook in the InfoPrint Manager Administration GUI by setting the Security level for your server to none. Types of permission In InfoPrint Manager, users can have three levels of permission: read, write, and delete. The levels provide these types of access. v Read- For operations, the user can perform the operation. For servers and queues, the user can view the attributes. For destinations, the user can view attributes and submit jobs to that destination. v Write- For all objects, the user can modify attributes. v Delete- For all objects, the user can delete the object. Note: The levels of permission are not cumulative. If you give a user delete permission only, he will not automatically have read and write permissions. Be sure to mark all of the levels of permission that the user needs. If you place user A on the ACL for the logical destination "print2ld" and give her read permission, she can send her print jobs to it and can open the "print2ld" object to see its properties. However, she cannot make changes to those properties. If she tried to change any of them or tried to delete the destination, she would receive an error message. If you decide that user A needs to be able to do more and give her write permission as well, she will be able to change the properties of "print2ld," but still will not be able to delete it. Important: If you protect a destination (logical or actual) so that only certain users can modify or delete its properties, you might inadvertently prevent other users from submitting print jobs to it. To be sure that all of your users can still print to the destination, add the wildcard character (*) to the ACL as a user with read permission. You can also attach ACLs to the operations that you can perform on InfoPrint objects. Allowing you to protect both operations and objects means that InfoPrint Manager Security provides different levels of security: you can protect all objects by using ACLs at the operation level or you can protect individual objects with 29