1.5 Security and Required Permissions
In order to enhance security, only privileged users can access the WEBES directory tree and run SEA commands. The requirements for each operating system are given here.
The following actions are restricted to privileged users:
- Running any WEBES or SEA commands (desta or wsea commands from the command prompt).
- Viewing the WEBES directory tree on a system.
Only the "root" user can perform these actions. The /usr/opt/hp/svctools directory is owned by root, and has rwx (read, write, and execute) permissions for root (owner), and no permissions for any other user (group or world).
The following actions are restricted to privileged users:
- Running any WEBES or SEA commands (desta or wsea commands from the command prompt).
- Viewing the WEBES directory tree on a system.
Only the "root" user can perform these actions. The /opt/hp/svctools directory is owned by root, and has rwx (read, write, and execute) permissions for root (owner), and no permissions for any other user (group or world).
The following actions are restricted to privileged users:
- Running any WEBES or SEA commands (desta or wsea commands from the command prompt).
- Viewing the WEBES directory tree on a system.
Only the "root" user can perform these actions. The /usr/opt/hp/svctools directory is owned by root, and has rwx (read, write, and execute) permissions for root (owner), and no permissions for any other user (group or world).
Commands—To execute any SEA commands (DESTA or WSEA commands), the user needs all of the following OpenVMS privileges. Note that these are a subset of the privileges required to install, upgrade, or uninstall WEBES as described in the WEBES Installation Guide:
Files—File access is restricted in the WEBES installed directory tree pointed to by the SVCTOOLS_HOME logical (SYS$COMMON:[HP] by default). To view these files, you must be a member of the System group, your user ID must have all privileges, or you must issue the SET PROCESS /PRIV=ALL command.
All directories and files in the SVCTOOLS_HOME tree are owned by the System user, and have System, Owner, and Group permissions of RWED (Read, Write, Execute, and Delete). There are no permissions for World.
The following actions are restricted to privileged users:
- Running any of the WEBES programs from the Start menu (Start>Programs>Hewlett-Packard Service Tools).
- Running any WEBES or SEA command (desta or wsea commands from the command prompt).
- Accessing any files within the WEBES installed directory tree (C:\Program Files\hp\svctools by default).
To perform restricted actions, your user ID must be either:
- A member of the Administrators group on that machine.
- A member of a group that is a member of the Administrators group on that machine. For example, if your user ID is a Domain Admin, and you have added Domain Admins to the Administrators group on the local machine, you will have the necessary permissions. (The WEBES Install Guide describes how to add a group to the Administrators group.)