HP Distributed Print Service Administration Guide

Chapter 8 241
Managing DCE Security for HPDPS
Giving Your DCE Groups Permissions to HPDPS Objects
Referring to Figure 8-1, “Propagation of DCE Permissions,”, the
object ACL of object b is inherited from theIO ACL of Container B.
For example, the object ACL for a logical or physical printer is
inherited from the IO ACL of the printer directory of the server
containing that printer. The permissions are propagated from the
IO ACL of the /.:/pdsec directory through the supervisor and
printer containers.
Figure 8-2, “DCE Permissions, Servers and Objects,” illustrates how
DCE permissions are used by HPDPS. The /.:/pdsec, Super203,
printer, log, and other entries are DCE containers. You might think of
them as branches of a tree. The entry for the supervisor also represents
an HPDPS server object. The object ACL of the supervisor is inherited
from the IC ACL of the /.:/pdsec branch; this object ACL determines
the DCE permissions for the supervisor object.
Figure 8-2 DCE Permissions, Servers and Objects
The other entries, such as PhysPrt1 are DCE objects that represent
HPDPS objects. You might think of them as leaves on a branch. The
object ACLs for these objects are inherited from the IO ACLs of their
containers and are propagated from the/.:/pdsec branch through the
intermediary containers. The log directory contains the entry for the