HP Distributed Print Service Administration Guide

246 Chapter8
Managing DCE Security for HPDPS
Giving Your DCE Groups Permissions to HPDPS Objects
When prompted, enter the cell administrator password.
2. Use the acl_edit command to give the 203_Operators group read
and write permission for the IO ACL of the
/.:/pdsec/Super203/printer directory.
• Use the -io flag to specify the IO ACL
• Use the -m flag to modify the ACL
For example, enter:
acl_edit /.:/pdsec/Super203/printer -io \
-m group:203_Operators:rw
From now on, each physical printer created in the supervisor
Super203 grants the 203_Operators group read and write
permission.
Setting the Permissions Granted by One HPDPS
Object
To make an individual HPDPS object grant a set of permissions, edit the
ACL for the object.
When you specify the individual object of which you want to edit the
ACL, you must specify the full security directory path to the object.
1. First type in the pdsec soft link, /.:/pdsec/, to specify the security
directory.
2. Next, add the name of the server in which the object resides. If the
object is a server, stop here.
3. Next, add the subdirectory in which the type of object you are
affecting resides. For example:
• If the object is a printer, add printer.
• If the object is a log, add log.
• If the object is a queue, add queue.
• If the object is anything else, such as an initial value object, add
other.
4. Finally, add the name of the object.