Command Operation Authority And User Authentication - Hitachi VSP F1500 User And Reference Manual

Provisioning Guide for Hitachi Virtual Storage Platform Gx00 and Fx00
Models.
• If the specific user information or authority information is changed,
perform the user authentication processing on CCI again.
• CCI stores the session information for each user ID (managed by OS)
which is used for login to the client OS. Therefore, if users having the
different user ID (managed by OS) use the same client, execute CCI login
command for each user ID (managed by OS).

Command operation authority and user authentication

When CCI is used with the user authentication function enabled, commands
are executed complying with the operation authority of a user set by:
• Storage Navigator
• Device Manager - Storage Navigator
• Maintenance utility (GUM)
Controlling User Role
CCI verifies whether or not the user executing the command on the host was
already authenticated by checking the command device being in the
authentication mode. After that, CCI obtains the execution authority of the
command that is configured on the user role, and then compares the relevant
command and the execution authority.
Checking the execution authority
If the configuring commands authenticated are compared with the execution
authorities of commands configured on the user role and they do not
correspond, CCI rejects the command with an error code "EX_EPPERM".
Normally, the user role needs to be the consistent and integrated authority
among the large storage systems. In case of HORCM instances that are
configured by the multiple large storage systems, the execution authorities
are obtained by the serial number of the storage systems. If the user role is
for the multiple storage systems and is not consistent among these storage
systems, CCI makes the integrated authority by performing the logical AND
of the execution authorities among the storage systems.
The target commands
CCI checks execution authorities on the following commands that use
command devices.
• horctakeover, horctakeoff
• paircreate, pairsplit, pairresync
• raidvchkset
CCI functions
Command Control Interface User and Reference Guide
3-9