Certserver.admin.certificate; Certserver.admin.request.enrollment - Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual

17.7.1.1. Operations
Operations
read
modify
17.7.1.2. Default ACIs
allow (read) group="Administrators" || group="Certificate Manager Agents"
|| group="Data Recovery Manager Agents"
|| group="Online Certificate Status Manager Agents"
|| group=Auditors
allow (modify) group="Administrators"
Agents, administrators, and auditors can read ACL configuration; only administrators can modify ACL
configuration.

17.7.2. certServer.admin.certificate

This entry is associated with the CA administration interface and is only available during the
configuration of the target of evaluation (TOE); it is unavailable after the CA is running.
17.7.2.1. Operations
Operations
import
17.7.2.2. Default ACIs
allow (import) user="anybody"
Anyone can import a certificate.

17.7.3. certServer.admin.request.enrollment

This entry is associated with the CA administration interface and is only available during the
configuration of the target of evaluation (TOE); it is unavailable after the CA is running. Allow or deny
submit, read, or execute operations for an administrator enrollment request.
17.7.3.1. Operations
Operations
submit
read
certServer.admin.certificate
407