HP Distributed Print Service Administration Guide

240 Chapter8
Managing DCE Security for HPDPS
Giving Your DCE Groups Permissions to HPDPS Objects
Figure 8-1 Propagation of DCE Permissions
Each DCE container has an IO ACL and an IC ACL. Setting the IO ACL
and the IC ACL of a container affects subsequently created entries
within the container as follows:
• For subsequently created child entries that are themselves
containers:
— The parent container IC ACL becomes both the IC ACL and the
object ACL of the child container. Referring to Figure 8-1,
“Propagation of DCE Permissions,”, the IC ACL and object ACL of
Container B are inherited from the IC ACL of Container A. For
example, the IC ACL and the object ACL of a server are inherited
from the IC ACL of the /.:/pdsec directory.
— The parent container IO ACL becomes the IO ACL of the child
container.
Referring to Figure8-1, “Propagation of DCE Permissions,”, the IO
ACL of Container B is inherited from the IO ACL of Container A.
For example, the IO ACL of a server entry and a printer entry
are inherited from the IO ACL of the /.:/pdsec directory.
• For subsequently created child entries that are not containers:
— The parent container IO ACL becomes the object ACL of the child
entry. The parent container IC ACL has no effect.