Ricoh C400DN Security Target - Page 62

Table 27 : Authorised Identified Roles Allowed to Override Default Values

Page 62 highlights

Table 26 : User Roles for Security Attributes (b) Page 61 of 91 Security Attributes Login user name of normal user for Basic Authentication Login user name of normal user for External Authentication Available function list Function type User role Operations Query, modify, delete, newly create Query Query, modify, delete, newly create Query, modify Query (however, query is not allowed in case of External Authentication) No operation permitted No operation permitted User Roles with operation permission MFP administrator Normal user who owns the applicable login user name MFP administrator MFP administrator Applicable normal user None None FMT_MSA.3(a)Static attribute initialisation Hierarchical to: No other components. Dependencies: FMT_MSA.1 Management of security attributes FMT_SMR.1 Security roles FMT_MSA.3.1(a) The TSF shall enforce the [assignment: document access control SFP] to provide [selection: restrictive] default values for security attributes that are used to enforce the SFP. FMT_MSA.3.2(a) The TSF shall allow the [assignment: authorised identified roles shown in Table 27] to specify alternative initial values to override the default values when an object or information is created. Table 27 : Authorised Identified Roles Allowed to Override Default Values Objects Document data Document data [when document data attribute is (+DSR)] Security Attributes Document data attribute Document user list Authorised Identified Roles - No authorised identified roles - MFP administrator - Normal user who stored the applicable document data Copyright (c) 2012 RICOH COMPANY, LTD. All rights reserved.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92

Page 61 of
91
Copyright (c) 2012 RICOH COMPANY, LTD. All rights reserved.
Table 26 : User Roles for Security Attributes (b)
Security Attributes
Operations
User Roles with operation permission
Query,
modify,
delete,
newly create
MFP administrator
Login user name of normal user
for Basic Authentication
Query
Normal user who owns the applicable
login user name
Login user name of normal user
for External Authentication
Query,
modify,
delete,
newly create
MFP administrator
Query,
modify
MFP administrator
Available function list
Query
(however, query is not
allowed in case of
External Authentication)
Applicable normal user
Function type
No operation permitted
None
User role
No operation permitted
None
FMT_MSA.3(a)Static attribute initialisation
Hierarchical to:
No other components.
Dependencies:
FMT_MSA.1 Management of security attributes
FMT_SMR.1 Security roles
FMT_MSA.3.1(a) The TSF shall enforce the
[assignment: document access control SFP]
to provide
[selection:
restrictive]
default values for security attributes that are used to enforce the SFP.
FMT_MSA.3.2(a) The TSF shall allow the
[assignment: authorised identified roles shown in Table 27]
to
specify alternative initial values to override the default values when an object or information is
created.
Table 27 : Authorised Identified Roles Allowed to Override Default Values
Objects
Security
Attributes
Authorised Identified Roles
Document data
Document data
attribute
- No authorised identified roles
Document data
[when document
data attribute is
(+DSR)]
Document user
list
- MFP administrator
- Normal user who stored the applicable document data