Ricoh InfoPrint Pro C900AFP Manual page 48

ACLs applied only to them. Or you can do both: protect all objects by using
operation-level ACLs for some operations, and limit access to subsets of objects by
using object-level ACLs.
For operations, there is only one level of permission: read. If a user has read
permission, he can perform that action; if he does not, he cannot perform the
action. For example, user B is a printer operator and must be able to move jobs to
different positions in the print queue because some jobs need to be printed before
others. You can give user B read permission for the operation Reorder Job to allow
him to do his job. On the other hand, user C submits print jobs from his office
workstation and does not like to wait for the jobs ahead of his in the queue to
print. To prevent him from moving jobs, do not put him on the ACL for the
Reorder Job operation. When he tries to move his job to the top of the queue, the
action will be denied.
When you install InfoPrint Manager, many operations are already protected so that
only members of the admin and oper groups can perform them. You can see the
ACLs for operations in the Management Console by selecting the
Security-ACL-Operations item in the left pane. If you want users to be able to
perform those operations, you must either add those users to the individual ACLs
or to a group that has permission (either the existing admin and oper groups or a
new group that you create).
Note: If an object is protected, a user can only perform an operation on that object
if he has both read permission for the operation and the appropriate level of
permission for the object (for example, a job or a printer).
v If the object is not protected, any user with read permission on an operation can
v If the object is protected, the permission needed depends on the operation. For
By default, InfoPrint objects (destinations, queues, servers) are not protected,
members of the admin group have read permission on all operations, members of
the oper group have read permission on most operations, and all users have read
permission on five operations. Those five operations are:
v List/Query (all objects)
v Print
v Modify job
v Query job
v Remove job (delete job)
However, users who are not members of the admin and oper groups can only
modify and remove jobs that they submitted. In addition, if the ACL for the
Reorder job action is changed so that everyone can use it, users who are not
members of the admin and oper groups will only be able to reorder jobs that they
submitted. By default, members of the admin and oper groups can do all six of
those operations on all jobs.
Note: If you decide to protect your queues, all users will still be able to perform
the tasks listed above on their own jobs. Users who are on the ACL for a queue
will be able to perform those tasks on all jobs in that queue.
30
InfoPrint Manager for Windows: Procedures
perform that operation.
example: List requires read permission on the object, Set requires write
permission, and Delete requires delete permission.