HP Archive Backup System for OpenVMS Guide to Operations

Security
5.1 MDMS Rights
Table 5–1 Examples of Low Level Rights
Right
MDMS_DELETE_OWN
MDMS_SHOW_ALL
MDMS_SET_ALL
Explanation
Can delete any object that you own
Can show any object
Can modify the attributes of any object
Refer to the MDMS Reference Guide for a complete list of MDMS low-level rights, and the
default mapping of low-level rights to high-level rights.
In previous versions, ABS had a set of rights of its own, and you could map ABS rights to
MDMS rights. For backward compatibility purposes, this mapping is still supported as shown in
the following table:
Table 5–2 ABS to MDMS Rights Mapping
ABS Right
ABS_BYPASS
ABS_BACKUP_JOB
ABS_SHOW_ALL
ABS_CREATE_EXECUTION_ENV
ABS_CREATE_STORAGE_CLASS
MDMS Rights Granted
MDMS_ALL_RIGHTS
MDMS_HR_USER
MDMS_SHOW_ALL
MDMS_CREATE_ALL
MDMS_SET_ALL
MDMS_SHOW_ALL
The mapping of ABS to MDMS rights is optional, and is controlled by the “ABS Rights”
attribute in the domain. If you enable this attribute, the ABS to MDMS rights mapping is supported.
Finally, you can optionally enable the OpenVMS privilege SYSPRV to map to
MDMS_ALL_RIGHTS. This makes it convenient for system managers to gain all needed rights
by simply turning on SYSPRV. You can control this option using the “SYSPRV” attribute in the
domain. If you enable this attribute, the SYSPRV mapping is supported.
Note
If you wish to use the SYSPRV attribute from the MDMSView GUI, the user’s authorization
file must have SYSPRV defined as a privilege and a default privilege. Having
SETPRV is not sufficient as there is no way to set the SYSPRV privilege from the GUI.
Having access rights alone does not necessarily mean that you can perform all operations
granted by those rights. Access control checks (if any) are applied in addition to rights to determine
the final access to an object.
Security 5–3