Certserver.ra.configuration; Certserver.securitydomain.domainxml - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

Appendix D. ACL Reference
allow (read) group="Administrators" || group="Auditors" || group="Certificate Manager
Agents" || group="Registration Manager Agents" || group="Data Recovery Manager Agents" ||
group="Online Certificate Status Manager Agents";allow (modify) group="Administrators"
Operations Description
read View LDAP server destination information, publisher plug-in configuration, publisher instance configuration
instance configuration, rules plug-in configuration, and rules instance configuration. List publisher plug-ins
instances, and mapper plug-ins and instances.
modify Add and delete publisher plug-ins, publisher instances, mapper plug-ins, mapper instances, rules plug-ins
instances, mapper instances, rules instances, and LDAP server destination information.
Table D.48. certServer.publisher.configuration ACL Summary
D.3.35. certServer.ra.configuration
Controls who can view and edit the configuration for any RA associated with the Certificate Manager.
The default configuration is:
allow (read) group="Administrators" || group="Auditors" || group="Certificate Manager
Agents" || group="Registration Manager Agents" || group="Data Recovery Manager Agents" ||
group="Online Certificate Status Manager Agents";allow (modify) group="Administrators"
Operations Description
read View the RA configuration.
modify Modify the RA configuration.
Table D.49. certServer.ra.configuration ACL Summary
D.3.36. certServer.securitydomain.domainxml
Controls access to the security domain information maintained in a registry by the domain host
Certificate Manager. The security domain configuration is directly accessed and modified by
subsystem instances during configuration, so appropriate access must always be allowed to
subsystems, or configuration could fail.
allow (read) user="anybody";allow (modify) group="Subsystem Group"
Operations Description
read View the security domain configuration.
modify Modify the security domain configuration by changing instance information and adding and removing insta
Table D.50. certServer.securitydomain.domainxml ACL Summary
510