HP NonStop G-Series - Manual (Page 60)

Scheduled Synchronization
HP AutoSYNC User’s Guide—522580-016
4-2
The AutoSYNC Authorizer
Scheduled synchronizations, however, are managed by the AutoSYNC monitor
process. The AutoSYNC monitor acts as an agent for the AutoSYNC users, but also
must ensure that each user has access rights to the files that are to be synchronized.
The following pages describe how AutoSYNC is granted sufficient authority to act as
an agent for multiple users, but in a way that prevents granting enhanced access rights
to those users.
The AutoSYNC Authorizer
To synchronize for multiple users, AutoSYNC must be authorized by a user who has
sufficient access rights, as follows:
•
If there is only one AutoSYNC user, the authorizer can be that user.
•
If all AutoSYNC users are in one group, the group manager may be the authorizer.
•
If there are AutoSYNC users in diverse groups, the authorizer must be
SUPER.SUPER.
The authorizer is determined as follows:
•
If a user issues the AUTHORIZE command, it confers access authority to the
ASYSYNCP program using the PROGID facility. The AUTHORIZE command also
allows you to designate a different user ID as the administrator.
•
If the AUTHORIZE command is not issued, the user ID that issues the START
MONITOR command will start and confer authority to the ASYSYNCP program.
•
If the AUTHORIZE command is issued, any user can start the monitor process.
Otherwise, the authorizer must start the monitor after every system cold load.
The AutoSYNC Administrator
The AutoSYNC administrator is either the same as the authorizer or a user ID that is
trusted and has been designated by the authorizer.
The administrator controls who can be a user of AutoSYNC. When a AutoSYNC user
is added, the administrator can specify various options, including the maximum
process priority that can be used by the user. At any time, the administrator can alter,
delete, suspend, or activate a user.
The administrator is determined by the ownership and security of the SYNCUSER
table in the MapDB. Any user that can update this table is, de facto, an administrator.
The administrator uses the following commands:
•
ADD SYNCUSER
•
INFO SYNCUSER
•
ALTER SYNCUSER
•
DELETE SYNCUSER