HP Integrity NonStop J-Series - Manual (Page 82)

Web ViewPoint User Guide Version 5.14 - 528226-014 82
Object Manager has three default objects for providing security. These are logon, tacl and users. Each object can
be used to allow certain operations like: who all are allowed to logon to Object Manager, who is allowed to
execute tacl commands, who is allowed to execute [WRITE] commands, etc.
The followingexplains each object in detail and how to add commands to them:
A. LOGON:
This object is primarily used to allow the creator of $OCM (in the shared environment) or $ABC (non-shared
environment), to restrict the access of Object Manager to only a given set of users.
By default, when Object Manager starts up in the shared environment (under the name of $OCM), everyone is
allowed to use/ start Object Manager by providing a valid username and password.
If Object Manager has been started in the non-shared environment (with any other process name), then only
the creator of the OCM process has access to the new environment.
However, the OCM process creator can allow certain users to use the new environment, by specifying the list
command under the logon object. To do so, you (creator of OCM) have to start Object Manager in the new
environment, and do the following, once Object Manager starts up:
 Click “Object Tree”
 Choose “Add command”
 Type Object Class as “logon”
 Type Command Name as “LIST”
 In the “Enter Template” field, type “NEX” followed by a comma separated list of users whom you want to
grant the access (the list can also contain SafeGuard aliases)
 Make sure that the “Sensitive Command” checkbox is checked
 Click on “Submit”
Allowing Object Manager access to a set of users
Note:
 If you start Object Manager in the shared environment, and you specify a list of users as above, then only
those users will be allowed to use/ start Object Manager
 If a previous list already existed, then it will be replaced by a new one
 The Object Name logon is case sensitive