Mackie V7.0 manual Allowing or prohibiting administration of supervisors

Configuring Xprint V7.0 Administering permission lists

6.7.8Allowing or prohibiting administration of supervisors

In your capacity as the Xprint V7.0 administrator, Xprint V7.0 permits you to specify which local administrators (root or subroot) are allowed to attach super- visors to a server that is running on a different host. For example, you can allow root of host B to attach a supervisor of B to a server running on host A. This can be achieved by assigning a permission list to the relevant server. Here is how to do this:

●Log in as the Xprint V7.0 administrator.

●Deactivate the server for which you want to change the associated super- visors:

xpchange -srv [selection] -st NOT_ACTIVE

where selection is the name of the server for which you want to grant or deny permissions. This can be omitted if you want to deactivate all defined servers, or you can define a selection criteria list according to which the relevant servers are selected.

●Assign to the server a permission list defining which other administrators are to be allowed to add, modify or delete supervisors for this server:

xpmod -srv [selection] -uppermission_list

permission_list is the allowed or denied list to be assigned. This permission list must already exist when you issue this command; if necessary create a new one first (see section “Creating a permission list” on page 144).

●Reactivate the modified server: xpchange -srv [selection]

iThe local privileges of root and subroot always take precedence over the permission list attached to the server. This means that you can only protect a server from administrators from other hosts, not from the administrators on the same host.

Example

To allow jim, subroot of host B, to define supervisors and attach them to any server in the domain:

xpadd -prm supervisor_administrator -al jim xpchange -srv -st NOT_ACTIVE

xpmod -srv -up supervisor_administrator

U23841-J-Z915-6-76 151