2.2  Account Permission Requirements

For enhanced security, only privileged users of each operating system can access the WEBES directory tree or run commands.

2.2.1  Tru64 UNIX Permissions

The following actions are restricted to privileged users:

Only the root user can perform these actions. The /usr/opt/hp/svctools directory is owned by root, and has rwx (read, write, and execute) permissions for root (owner), and no permissions for any other user (group or world).

2.2.2  HP-UX Permissions

The following actions are restricted to privileged users:

Only the root user can perform these actions. The /opt/hp/svctools directory is owned by root, and has rwx (read, write, and execute) permissions for root (owner), and no permissions for any other user (group or world).

2.2.3  Linux Permissions

The following actions are restricted to privileged users:

Only the root user can perform these actions. The /usr/opt/hp/svctools directory is owned by root, and has rwx (read, write, and execute) permissions for root (owner), and no permissions for any other user (group or world).

2.2.4  OpenVMS Privileges

Commands—To execute any SEA commands (DESTA or WSEA commands), the user needs all of the following OpenVMS privileges. Note that these are a subset of the privileges required to install, upgrade, or uninstall WEBES as described in the WEBES Installation Guide:

ALTPRI
BUGCHK
CMKRNL

DIAGNOSE
IMPERSONATE
NETMBX

SYSPRV
TMPMBX

Files—File access is restricted in the WEBES installed directory tree pointed to by the SVCTOOLS_HOME logical (SYS$COMMON:[HP] by default). To view these files, you must be a member of the System group, your user ID must have all privileges, or you must issue the SET PROCESS /PRIV=ALL command.

All directories and files in the SVCTOOLS_HOME tree are owned by the System user, and have System, Owner, and Group permissions of RWED (read, write, execute, and delete). There are no permissions for World.

2.2.5  Windows Permissions

The following actions are restricted to privileged users:

To perform restricted actions, your user ID must be at least one of the following:

For example, if your user ID is a member of the Domain Admin group, and you add Domain Admins to the Administrators group on the local system, you will have the necessary permissions. See your Windows documentation if you need help with configuring groups.