Table 17: Management Roles Of Security Attributes - Ricoh Aficio MP 8001 Manual

Dependencies:
FMT_MSA.1.1 The TSF shall enforce the [assignment: MFP access control SFP] to restrict the ability to
[selection: query, modify, delete, [assignment: newly create, change, add]] the security
attributes [assignment: security attributes in Table 17] to [assignment: users roles in
Table 17].

Table 17: Management roles of security attributes

Security attributes
General user IDs (a data
item of general user
information)
Administrator IDs
Administrator roles
Supervisor ID
Document data ACL
Document data default
ACL (a data item of
general user information)
FMT_MSA.3 Static attribute initialisation
Hierarchical to:
Dependencies:
FMT_MSA.3.1 The TSF shall enforce the [assignment: MFP access control SFP] to provide default
values [selection: [assignment: specified as shown in Table 18] for security attributes that
are used to enforce the SFP.
FMT_MSA.3.2 The TSF shall allow the [assignment: no authorised identified roles] to specify alternative
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.
[FDP_ACC.1 Subset access control, or
FDP_IFC.1 Subset information flow control]
FMT_SMR.1 Security roles
FMT_SMF.1 Specification of Management Functions
Operations
Query,
- User administrator
newly create,
delete
Query - General users
Newly create - Administrators
Query,
- Administrators who own the administrator IDs
change
Query - Supervisor
Query, - Administrators who are assigned these administrator
add, roles
delete
Query,
- Supervisor
change
Query, - File administrator
modify - Document file owner
- General users who have full control operation
permissions for the relevant document data
Query, - User administrator
modify - General user who creates the applicable document
data
No other components.
FMT_MSA.1 Management of security attributes
FMT_SMR.1 Security roles
Page 47 of 82
User roles