Ricoh Aficio MP 2851 Security Target - Page 72

Page 72 of 81 7.1.4.3 Management of Supervisor Information Management of supervisor information allows only supervisors to query and change supervisor IDs, and to change supervisor authentication information from the Operation Panel or Web Service Function. If the logged-in user from the Operation Panel or a client computer is a supervisor, the TOE allows that user to query and change supervisor IDs and to change supervisor authentication information. By the above, FMT_MSA.1 (Management of security attributes), FMT_MTD.1 (Management of TSF data), FMT_SMF.1 (Specification of management functions), and FMT_SMR.1 (Security roles) are satisfied. 7.1.4.4 Management of General User Information Management of general user information allows only specified users to perform all or some of the operations involved in creating, changing, and deleting general user information from the Operation Panel or Web Service Function. General user information includes general user IDs, general user authentication information, document data default ACL, and S/MIME user information. If the logged-in user from the Operation Panel and Web Service Function is a user administrator or general user, the TOE allows that user to perform the operations shown in Table 31. Table 31: Authorised operations on general user information Operations on general user information Creation of new general user information to Address Book (general user ID, general user authentication information, and S/MIME user information) Edit general user information registered to Address Book (authentication information of general users, document data default ACL, S/MIME user information) Query general user information registered to Address Book (general user ID, document data default ACL, S/MIME user information) Query general user information registered to Address Book (general user ID, S/MIME user information) Delete general user Information registered to Address Book (general user ID, authentication information of general users, S/MIME user information) Delete general user information registered to Address Book (S/MIME user information) Authorised user User administrators User administrators General users themselves User administrators General users themselves General users User administrators General users identified as the S/MIME users When new general user information is created, the new general user ID will be set to the value of the document data default ACL as the document file owner, and authorised operations on the document data will be reading document data and modifying the document data ACL. Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.