Conference azur::mcc

5337.0. "Access Control..." by TOSKI::ADAMS (Hope I die before I get old) Wed Jul 14 1993 11:40

I'm curious about what I would call the Access Control on managed objects.
It seems clear that one needs to be able to transfer Read authority, or 
Write authority (and perhaps there are even other concepts) from one Manager
to another.

Do the OSI standards address this, and how?
Does SNMP address this?

I know I could go and explore the standards documents, but I don't have
all of them, and I imagine most are still drafts, so can someone enlighten me?

I'm wondering about these issues:
	- there must be some authentication mechanism to identify the User
	- there must be some attribute of the managed object (and perhaps
	  at the attribute level) that defines R/W per User, with some
	  defaults
	- there must be some secure way these access control attributes are 
	  created when the managed object is created, and some secure way
	  they are modified

This is all brought about by thinking about multiple users and management
control centers in an enterprise, about shift changes, about transferring
control from one regional management center to another, about allowing
come control centers to have read-only access to managed objects while one
center maintains full R/W authority, etc.

Also posted in NETMGT and TEMIP conferences.