Software Distributor Administration Guide for HP-UX 11i

SD-UX Security
Permission Requirements, by Command
Chapter 9 299
• The target agent verifies that the controller user has write
permission on the target product, if it already exists.
• The source agent verifies that the target agent system has read
permission on the source product.
• The source (depot) agent verifies that the depot is registered. If not,
the agent verifies that the controller user and the target agent
system each has insert permission on the source’s host.
Installing (swinstall)
• Any list operations required to facilitate this function must be
checked as described in the swlist section above.
• The target agent verifies that the controller user has insert
permission on the target root.
• The target agent verifies that the controller user has write
permission on the target root, if the product already exists.
• The source (depot) agent verifies that the target agent system has
read permission on the source product.
Removal (swremove)
• If the object is a product on a depot, the target agent verifies that the
controller user has write permission on the target product.
• If the object is a product on a root, the target agent verifies that the
controller user has write permission on the target root.
• If the object is a depot or root, or the last product contained in one of
these, before removing the container the target agent must verify
that the controller user has delete permission on the target root or
depot.
Configuration (swconfig)
• The same permission checks are made as for the swremove operation
above, except that this command does not apply to depots.