Ricoh Aficio MP 3350B Security Target - Page 42

Subjects, Objects, and Operation among Subjects and Objects

Page 42 highlights

6.1.3 Class FDP: User data protection Page 42 of 83 FDP_ACC.1 Subset access control Hierarchical to: No other components. Dependencies: FDP_ACF.1 Security attribute based access control. FDP_ACC.1.1 The TSF shall enforce the [assignment: MFP access control SFP] on [assignment: List of Subjects, Objects, and Operation among Subjects and Objects in Table 8]. Table 8: List of Subjects, Objects, and Operations among Subjects and Objects Subjects Administrator process General User process Objects Document Data Document Data Operations among subjects and objects Deleting Document Data Storing Document Data Reading Document Data Deleting Document Data FDP_ACF.1 Security attribute based access control Hierarchical to: No other components. Dependencies: FDP_ACC.1 Subset access control FMT_MSA.3 Static attribute initialization. FDP_ACF.1.1 The TSF shall enforce the [assignment: MFP access control SFP] to objects based on the following: [assignment: subjects or objects, and their corresponding security attributes shown in Table 9]. Table 9: Subjects, Objects and Security Attributes㩷 Types Subjects or objects Security attributes Subject Administrator process - Administrator IDs - Administrator Roles Subject General User process - General User IDs - Document Data Default ACL Object Document Data - Document Data ACL 㩷 FDP_ACF.1.2 The TSF shall enforce the following rules to determine if an operation among controlled subjects and controlled objects is allowed: [assignment: rules governing subject's operations on objects and access on operations shown in Table 10]. Copyright (c) 2009,2010 RICOH COMPANY, LTD. All Rights Reserved.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83

Page 42 of 83
6.1.3
Class FDP: User data protection
FDP_ACC.1
Subset access control
Hierarchical to:
No other components.
Dependencies:
FDP_ACF.1 Security attribute based access control.
FDP_ACC.1.1 The TSF shall enforce the
[assignment: MFP access control SFP]
on
[assignment: List of
Subjects, Objects, and Operation among Subjects and Objects in
Table 8
]
.
Table 8: List of Subjects, Objects, and Operations among Subjects and Objects
Subjects
Objects
Operations among subjects and objects
Administrator process
Document Data
Deleting Document Data
General User process
Document Data
Storing Document Data
Reading Document Data
Deleting Document Data
FDP_ACF.1
Security attribute based access control
Hierarchical to:
No other components.
Dependencies:
FDP_ACC.1 Subset access control
FMT_MSA.3 Static attribute initialization.
FDP_ACF.1.1
The TSF shall enforce the
[assignment: MFP access control SFP]
to objects based on the
following:
[assignment:
subjects or objects, and their corresponding security
attributes shown in
Table 9
]
.
Table 9: Subjects, Objects and Security Attributes
Types
Subjects or objects
Security attributes
Subject
Administrator process
- Administrator IDs
- Administrator Roles
Subject
General User process
- General User IDs
- Document Data Default ACL
Object
Document Data
- Document Data ACL
FDP_ACF.1.2 The TSF shall enforce the following rules to determine if an operation among controlled
subjects and controlled objects is allowed:
[assignment: rules governing subject's
operations on objects and access on operations shown in
Table 10
]
.
Copyright (c) 2009,2010 RICOH COMPANY, LTD. All Rights Reserved.