Management Of Supervisor Information; Management Of General User Information; Table 31: Authorised Operations On General User Information - Ricoh Aficio MP C2800 Manual

7.1.4.3

Management of Supervisor Information

Management of supervisor information allows only supervi s or to query and change supervisor ID, and to
change supervisor authentication information from the Operation Panel or Web Service Function.
If the logged-in user from the Operation Panel or a client computer is a supervisor, the TOE allows that user
to query and change supervisor ID and to change supervisor authentication information.
By the above, FMT_MSA.1 (Management of security attributes), FMT_MTD.1 (Management of TSF data),
FMT_SMF.1 (Specification of management functions), and FMT_SMR.1 (Security roles) are satisfied.
7.1.4.4

Management of General User Information

Management of general user information allows only specified users to perform all or some of the operations
involved in creating, changing, and deleting general user information from the Operation Panel or Web
Service Function. General user information includes general user IDs, general user authentication
information, document data default ACL, and S/MIME user information.
If the logged-in user from the Operation Panel and Web Service Function is a user administrator or general
user, the TOE allows that user to perform the operations shown in Table 31.

Table 31: Authorised operations on general user information

Operations on general user information
Creation of new general user information to Address Book
(general user ID, general user authentication information,
and S/MIME user information)
Edit general user information registered to Address Book
(authentication information of general users, document
data default ACL, S/MIME user information)
Query general user information registered to Address
Book
(general user ID, document data default ACL, S/MIME
user information)
Query general user information registered to Address
Book
(general user ID, S/MIME user information)
Delete general user Information registered to Address
Book
(general user ID, authentication information of general
users, S/MIME user information)
Delete general user information registered to Address
Book
(S/MIME user information)
When new general user information is created, the new general user ID will be set to the value of the
document data default ACL as the document file owner, and authorised operations on the document data will
be reading document data and modifying the document data ACL.
By the above, FMT_MSA.1 (Management of security attributes), FMT_MTD.1 (Management of TSF data),
FMT_SMF.1 (Specification of management functions), and FMT_SMR.1 (Security roles) are satisfied.
Copyright (c) 2009,2010 RICOH COMPANY, LTD. All Rights Reserved.
Authorised user
User administrators
User administrators
General users themselves
User administrators
General users themselves
General users
User administrators
General users identified as the S/MIME
users
Page 71 of 80