GOLDEN@SCU.BITNET ("Tom Golden") (11/12/87)
-------------------------------------------------------------------------------
From: Tom Golden, Operations Manager (GOLDEN@SCU.BITNET)
Academic Computer Center
Santa Clara University
Santa Clara, CA 95053 USA
-------------------------------------------------------------------------------
Given a VAX running VMS V4.5, is there any way (not involving software
development) to restrict a device queue so that only users posessing a
specific rights identifier may access said queue?
I am aware that queues themselves can be protected via system/owner/group/
world protection, and that devices themselves can be protected via access
control lists. However, despite my best efforts, the device becomes fully
accessible once it is assigned to a queue because the job symbiont itself
apparently bypasses the device protection.
My proposed solution is:
1. Set the queue protection to S:RWED,O:none,G:none,W:none
2. Implement a foreign command which emulates the PRINT
command to the protected queue
3. Protect the foreign command's image so that only users
posessing the rights identifier may execute the image.
This solution is not particularly elegant and users will have difficulty
understanding why they must use a different print command to access this
printer...I would like to know if there is a better way.
I appreciate any and all suggestions and will pass on what I find out
to anyone who requests the information.
-------------------------------------------------------------------------------