HP Distributed Print Service Administration Guide

Chapter 8 247

Managing DCE Security for HPDPS

Giving Your DCE Groups Permissions to HPDPS Objects

Examples of Specifying Different Kinds of Objects

• To change the permissions granted by the spooler Spool1, edit the

…/srvr_objs/Spool1 ACL for the object.

• To change the permissions granted by the queue Queue1, contained in

the spooler Spool1, edit the …/srvr_objs/Spool1/queue/Queue1

ACL for the object.

• To change the permissions granted by the restricted logical printer

LogPrt1Restrict, contained in the spooler Spool1, edit the

…/srvr_objs/Spool1/printer/LogPrt1Restrict ACL for the

object.

• To change the permissions granted by the physical printer PhyPrt1,

contained in the supervisor Super1, edit the

…/srvr_objs/Super1/printer/PhyPrt1 ACL for the object.

Giving a DCE Group Permission to an Individual HPDPS Object

To give the 203_Operators group read and write permission for the

physical printer PhyPrt1 contained by the supervisor Super1, use the

following steps:

1. If you have not already done so, log in to DCE as the cell

administrator. For example, if the cell administrator DCE login is

cell_admin, enter:

dce_login cell_admin

When prompted, enter the cell administrator password.

2. Use the acl_edit command to modify the ACL.

• Use the -e ﬂag because you are modifying an object ACL rather

than an IO or IC ACL.

• Use the pdsec soft link.

• Use the -m ﬂag to modify the ACL.

For example, enter:

acl_edit -e /.:/pdsec/Super1/printer/PhyPrt1 \

-m group:203_Operators:rw

The physical printer PhyPrt1 now grants the 203_Operators group

read and write permission.