Checking Effective Permissions; Permissions Reference; Read Permission; Write Permission - HP BB118BV - StorageWorks Data Protector Express Package User Manual

Note that listing User 1 on the Permissions page and clearing the permissions check boxes is not
enough to deny his permissions to the property page. User 1 must no longer be equivalent to User 2
and User 1 must no longer be a member of the Marketing group.
On complex installations with multiple users and groups and varying levels of security, a particular user's
effective permissions can be difficult to identify. The easiest way to identify a user's effective
permissions is to log on as that user.
If you have not yet assigned the user a password, simply log on as the user. Browse the various General
property pages of the objects in the catalog. Verify that the displayed effective permissions match your
intended security measures.
If the user has a password and you do not know it, create an "alias" user and make it equivalent to the
user whose permissions you wish to check. Then log on as the alias user. Be certain to delete both the
alias user and its folder after verifying the effective permissions.

Permissions Reference

There are seven permissions: Read, Write, Delete, Modify, Create, Access and Supervisor. These
permissions affect different objects in the Data Protector Express catalog differently. Even though a
particular permission may not apply directly to that object, objects below it in the catalog hierarchy can
still inherit permissions from that object.
In the case of physical peripherals that perform read functions, such as controllers, devices, libraries and
volumes, Read permission to the peripheral is required in order for Data Protector Express to instruct the
peripheral to read files or directories.
In case of catalog objects that hold data, such as media, volumes, directories and files, Read permission is
required to read the data these objects contain.
Restore Catalog, Clean Device, Identify Media, Import Media, Restore Catalog.
This permission enables Copy (but not Paste), allowing the user to copy objects in the catalog.
Read permission is also required to run jobs. Backup jobs require Read permission to the appropriate
volumes, directories and files. Restore jobs require Read permission to the appropriate devices, libraries
and media. Verify jobs require Read permission to all of these objects.
Many commands that perform utility functions, such as Clean Device or Eject Media on a device,
require Read permission. Device commands that also read media in backup devices require this
permission.
Media, controller, device, library, volume, directory, file, catalog.
Controls whether a user can read from a given catalog object.
Copy, Run (job type), Rewind, Start, Eject Media, Eject Magazine, Retension,
Media, device, library, volume, directory, file, catalog.
Controls whether a user can write to a given catalog object.