Certserver.publisher.configuration - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Operations
read Viewing certificate profile defaults and constraints, certificate profile
input, certificate profile output, certificate profile input configuration,
certificate profile output configuration, default configuration, policy
constraints configuration, and certificate profile instance configuration.
Listing certificate profile plug-ins and certificate profile instances.
modify Adding, modifying, and deleting certificate profile defaults and
constraints, certificate profile input, certificate profile output, and
certificate profile instances. Adding and modifying default policy
configuration and policy constraints configuration.
Default ACIs
allow (read) group="Administrators" || group="Certificate Manager
Agents" || group="Registration Manager Agents" || group="Data
Recovery Manager Agents" || group="Online Certificate Status Manager
Agents" || group="Auditors"
allow (modify) group="Administrators"
Administrators, agents, and auditors are allowed to read certificate profile configuration;
only administrators are allowed to modify certificate profile configuration.

certServer.publisher.configuration

Allow or deny a read or modify operation for the publishing configuration.
Operations
read View LDAP server destination information, publisher plug-in
configuration, publisher instance configuration, mapper plug-in
configuration, mapper instance configuration, rules plug-in configuration,
and rules instance configuration. List publisher plug-ins and instances,
rules plug-ins and instances, and mapper plug-ins and instances.
modify Add and delete publisher plug-in, publisher instance, mapper plug-in,
mapper instance, rules plug-in, and rules instance. Modify publisher
instance, mapper instance, rules instance and LDAP server destination
information.
Default ACIs
allow (read) group="Administrators" || group="Auditors" ||
group="Certificate Manager Agents" || group="Registration Manager
Agents" || group="Data Recovery Manager Agents" || group="Online
Certificate Status Manager Agents"
ACL Reference
Chapter 9 Authorization 361