Then I have not been clear enough. The map permissions do depend on unix
userids and groups. Say your operators are in group 'staff' (or at least not in
'system')
and root is who you want to own the map. In the permissions dialog, set the
owner
to root, the group to system, the permissions to 664, the map to 'default', and
do this once with yes and once with no on the globals question. Whether
security
is enabled or not, those operator users should not be able to delete the default
map.
Cordially,
Leslie A. Clark
IBM Global Services - Systems Mgmt & Networking
Thanks for your reply Leslie,
I have set map permissions in Tivoli as you have described.The edit delete
object and delete submap have been disabled,but I can still go into file
delete map and delete the default map.
thanks Arthur
-----Original Message-----
From: Leslie Clark [mailto:lclark@US.IBM.COM]
Sent: Monday, 13 September 1999 15:00
To: NV-L@UCSBVM.UCSB.EDU
Subject: Re: user pofiles
Comments below..
Cordially,
Leslie A. Clark
IBM Global Services - Systems Mgmt & Networking
Hi,
I have several questions regarding netview security that I hope some one
might be able to help me with.
1./ I have been setting up user profiles and am quite happy with the default
settings however I want to change the operator profile so as the the group
cannot delete maps.
Which security registration file needs to be modified to prohibit users from
doing this.
> I would just use the Map Permissions menu pick on the Tivoli context menu
> to cover this. It does it with regular unix permissions based on owner,
> group, and others. That mysterious option about 'global' is what does it.
> I tell customers to do it once with yes and once with no, to cover both
> the files and the directories. Preventing write on the directories stops
> users from creating or deleting maps.
2./ Does a unix group need to be added or does the gui interface take care
of it?
> Both the users and the groups in Netview security are separate entities
> from unix users and groups. They don't exist anywhere except in Netview.
3./ Are there any bugs associated with version 5.1.1 and security.It behaves
rather strangely,either locks up or when you press ok to submit changes the
whole app closes.
Any one experienced this?I noticed there were a couple of bug fixes in ver
5.1.2 that mentioned nvsec_admin,perhaps worth installing the patch.
> I have turned it on at a couple of sites at level 5.1.1 and have not seen
> what you are describing. But I have not picked at it a lot.
thanks Arthur
|