This post is more than 5 years old
4 Posts
0
5561
October 31st, 2008 06:00
How can I distribute access rights for XSystems/XSets ?
In the XAM Architecture Documentation on side 16 I found a figure which shows an access model from two applications to two XSystems.
There application "Bar" and application "Foo" can access "XSystem A". But application "Foo" can only access "XSet C" instead of application "Bar" he can access all XSets.
Where is this configured? And which policie decides which application can access which XSet. And which application creates the three XSets on XSystem A?
Thanks Ralf
No Events found!
mikehorgan
47 Posts
0
October 31st, 2008 14:00
Hello Ralf -
In the XAM Model, an XSystem represents a logical container of XSets. An Xsystem instance represents an authenticated XAM 'session' or connection. The VIM and XAM Storage System implement system-specific XSet access control based on the authentication data that an application presents when initializing an XSystem instance.
The XAM standard does not mandate any particular model for mapping of XSystems to XSets; in the Centera VIM this mapping is based on the existing Centera Virtual Pools and Profiles facility. When an application authenticates using the Centera VIM, it passes information that authorizes the connection to take on the content permissions associated with a particular profile.
In the Centera model, each profile has a "home pool" assigned; all XSets written by this profile are assigned membership in this home pool. Any profile that is granted permissions on that pool is able to read or manipulate the content in the pool (according to the assigned permissions). A profile may have read access to many pools, but it can only write to one pool (the profiel's home pool). All of the profile/pool settings in Centera are assigned by the system operator via the Centera CLI; there is no API exposed to manipulate these settings.
Please post a follow-up question if you need further detail.
Best Regards,
Mike Horgan