Table 19 : Additional Rules To Control Operations On Document Data And User Jobs (A) - Ricoh Aficio MP C4501 Series Manual

Document +CPY
data
Document +DSR
data
Document +DSR
data
User jobs No setting of
document data
attribute
FDP_ACF.1.3(a) The TSF shall explicitly authorise access of subjects to objects based on the following
additional rules: [assignment: rules to control operations among subjects and objects
shown in Table 19].

Table 19 : Additional Rules to Control Operations on Document Data and User Jobs (a)

Objects Document Data
Attributes
Document +PRT
data
Document +FAXIN
data
Document +DSR
data
User jobs No
document
attribute
FDP_ACF.1.4(a) The TSF shall explicitly deny access of subjects to objects based on the following additional
rules: [assignment: deny the operations on the document data and user jobs in case of
supervisor process or RC Gate process].
FDP_ACF.1(b) Security attribute-based access control
Hierarchical to: No other components.
Dependencies: FDP_ACC.1 Subset access control
FMT_MSA.3 Static attribute initialisation
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved.
Read
Delete
Read
Delete
Operations
Delete
Delete
Delete
setting of Delete
data
Normal user Not allowed. However, it is allowed for
process normal user process that created the
document data.
Normal user Not allowed. However, it is allowed for
process normal user process with login user
name of normal user registered on
document user list for document data.
Normal user Not allowed. However, it is allowed for
process normal user process with login user
name of normal user registered on
document user list for document data.
Normal user Not allowed. However, it is allowed for
process normal user process with login user
name of normal user, which is the
security attribute of user jobs.
Subjects
MFP Allows.
administrator
process
MFP Allows.
administrator
process
MFP Allows.
administrator
process
MFP Allows.
administrator
process
Page 56 of 93
Rules to control Operations