HP Distributed Print Service Administration Guide

Chapter 8 245
Managing DCE Security for HPDPS
Giving Your DCE Groups Permissions to HPDPS Objects
1. Use the -d flag to delete the permissions the group has to the object.
For example, enter:
acl_edit /.:/pdsec -io -d group:Dept_6_OPs:
2. Remove the Dept_6_OPs group read and write permissions for the
IC ACL of the security directory. For example, enter:
acl_edit /.:/pdsec -ic -d group:Dept_6_OPs:
The security directory IO and IC ACLs no longer contain entries for the
Dept_6_OPs group. Any servers now created will not give this group any
permissions. Remember, if you delete and recreate any of the servers
that give the Dept_6_OPs group permissions, the newly created server
will once again inherit the permissions of the current security directory
IO and IC ACLs.
Setting the Default Permissions Granted by All
Physical Printers in a Supervisor
If you have created the supervisor, but have not yet created any physical
printers in the supervisor, the easiest way to make all physical printers
in a given supervisor grant a set of permissions is to edit the IO ACL of
the printer subdirectory of that supervisor.
For example, if the supervisor is called Super203, edit the IO ACL of the
/.:/pdsec/Super203/printer directory.
If you have already created physical printers in the supervisor, you can
set the permissions for these printers in one of two ways:
• Delete the printers, set the IO ACL of the printer subdirectory, and
create the printers again.
• Set the ACL for each physical printer separately, as explained in
“Setting the Permissions Granted by One HPDPS Object” next.
Following is an example of setting the default permissions for printers in
the supervisor Super203. The example shows how to make the example
printer operator group 203_Operators by default have read and write
permission for all the physical printers that are subsequently created in
the supervisor Super203. Use these steps:
1. If you have not already done so, log in to DCE as the cell
administrator. Enter the command:
dce_login cell_admin