2.2 Account Permission Requirements
For enhanced security, only privileged users of each operating system can access the WEBES directory tree or run commands.
- 2.2.1 Tru64 UNIX Permissions
- 2.2.2 HP-UX Permissions
- 2.2.3 Linux Permissions
- 2.2.4 OpenVMS Privileges
- 2.2.5 Windows Permissions
2.2.1 Tru64 UNIX Permissions
The following actions are restricted to privileged users:
- Running any WEBES or SEA commands (desta, wccproxy, or wsea commands from the command prompt).
- Viewing the WEBES directory tree on a system.
Only the root user can perform these actions. The /usr/opt/hp/svctools directory is owned by root, and has rwx (read, write, and execute) permissions for root (owner), and no permissions for any other user (group or world).
2.2.2 HP-UX Permissions
The following actions are restricted to privileged users:
- Running any WEBES or SEA commands (desta, wccproxy, or wsea commands from the command prompt).
- Viewing the WEBES directory tree on a system.
Only the root user can perform these actions. The /opt/hp/svctools directory is owned by root, and has rwx (read, write, and execute) permissions for root (owner), and no permissions for any other user (group or world).
2.2.3 Linux Permissions
The following actions are restricted to privileged users:
- Running any WEBES or SEA commands (desta, wccproxy, or wsea commands from the command prompt).
- Viewing the WEBES directory tree on a system.
Only the root user can perform these actions. The /usr/opt/hp/svctools directory is owned by root, and has rwx (read, write, and execute) permissions for root (owner), and no permissions for any other user (group or world).
2.2.4 OpenVMS Privileges
Commands—To execute any SEA commands (DESTA or WSEA commands), the user needs all of the following OpenVMS privileges. Note that these are a subset of the privileges required to install, upgrade, or uninstall WEBES as described in the WEBES Installation Guide:
Files—File access is restricted in the WEBES installed directory tree pointed to by the SVCTOOLS_HOME logical (SYS$COMMON:[HP] by default). To view these files, you must be a member of the System group, your user ID must have all privileges, or you must issue the SET PROCESS /PRIV=ALL command.
All directories and files in the SVCTOOLS_HOME tree are owned by the System user, and have System, Owner, and Group permissions of RWED (read, write, execute, and delete). There are no permissions for World.
2.2.5 Windows Permissions
The following actions are restricted to privileged users:
- Running any of the WEBES programs from the Start menu (Start | Programs | Hewlett-Packard Service Tools).
- Running any WEBES or SEA commands (desta, wccproxy, or wsea commands from the command prompt).
- Accessing any files within the WEBES directory tree, C:\Program Files\hp\svctools by default.
To perform restricted actions, your user ID must be at least one of the following:
- A member of the Administrators group on that system.
- A member of another group that is a member of the Administrators group on that system.
- For example, if your user ID is a member of the Domain Admin group, and you add Domain Admins to the Administrators group on the local system, you will have the necessary permissions. See your Windows documentation if you need help with configuring groups.