ACL Reference
Operations
read
modify
Default ACIs
allow (read) group="Administrators" || group="Certificate Manager
Agents" || group="Registration Manager Agents" || group="Data
Recovery Manager Agents" || group="Online Certificate Status Manager
Agents" || group="Auditors"
allow (modify) group="Administrators"
Administrators, agents, and auditors are allowed to read job configuration; only
administrators are allowed to modify job configuration.
certServer.kra.certificate.transport
Allow or deny a read operation to display the key transport certificate.
Operations
read
Default ACIs
allow (read) user="anybody"
Anyone can view the key transport certificate.
certServer.kra.configuration
Allow or deny a read or modify operation to the Data Recovery Manager configuration.
352
Red Hat Certificate System Administrator's Guide • September 2005
Viewing basic job settings, job instance settings, and job plug-in settings.
Listing job plug-ins and job instances.
Adding and deleting job plug-ins and job instances. Modifying job
plug-ins and job instances.
Displaying the Key Transport Certificate.