Document permissions govern who can view or modify a particular document. If you do not explicitly set permissions for a document and you submit the document through the Web UI, the command line with llp, or directory monitoring with the llpd.config file, EasySpooler uses the default setting. For documents received from external hosts see, Document Permissions with External Hosts below.
The default setting allows the document owner to view and modify the document, the group to modify the document, and others to modify the document. EasySpooler indicates these permissions as follows: vm-m-m. The first two characters indicate access by the user, the second two characters indicate access by the group, and the last two characters indicate access by others. A v indicates that viewing is allowed, an m indicates modification is allowed, and a hyphen (-) indicates that access is not allowed.
If you do not want to use the default setting, you can change document permissions in various ways as described in the following list. If document permissions are set in more than one of these ways, EasySpooler gives priority in the order listed below.
You can set document permissions by using the environment variable LPOVERRIDE with the -P docperms option. LPOVERRIDE allows you to set options that take precedence over the same options if set on the llp command line, with the llpd.config file, in an alias definition, or through the Web UI (Document Settings). For more information on LPOVERRIDE, see the section on LPOVERRIDE in Chapter 4 of the ROC EasySpooler Developer's Guide.
You can set document permissions in the command line using the -P docperms option with llp or llpd, or in an alias definition. See the sections on llp and llpd in Chapter 2 and lpsalias in Chapter 3 of the ROC EasySpooler Developer's Guide
You can set document permissions when you submit a document from the Web UI by accepting or changing the default entry in the Permissions field on the Change Document settings window. See Document Settings.
NOTE: If you submit a document from the Web UI, the document permissions value cannot be overridden through mapping or the environment variables LPOPTION or LPS_DOCPERMS.
You can set document permissions through mapping, which offers you the option of setting document permissions in the user, group, or default mapping definition. See Security: Mapping.
You can set document permissions by using the environment variable LPOPTION using the -P docperms option with llp or llpd. See the section on LPOPTION in Chapter 4 of the ROC EasySpooler Developer’s Guide.
You can set document permissions by using the environment variable LPS_DOCPERMS to set the value of the document permissions field in the queue record when a spool file is created. See the section on LPS_DOCPERMS in Chapter 4 of the ROC EasySpooler Developer’s Guide.
The ways for setting document permissions and their priority varies for documents received from external hosts.
NOTE: See Chapter 4, Environment Variables, in the ROC EasySpooler Developer’s Guide for information on setting an environment variable so that it affects document permissions for a document received from an external host.
The priority if receiving a document from a trusted hosta when the document was submitted through a remote Rhapsody or EasySpooler destination is as follows:
LPOVERRIDE environment variable with the -P docperms option
Alias definition with the -P docperms option (only if spooling to an alias)
User, group, or default mapping definition
Value from the incoming queue record
LPOPTION environment variable with the -P docperms optionb
lpsnetdocperms set in the global tuning parametersb
vm-m-m defaultb
The priority if receiving a document from a trusted non-Rhapsody or non-EasySpooler host when the document was submitted through lpr is as follows:
LPOVERRIDE environment variable with the -P docperms option
Alias definition with the -P docperms option (only if spooling to an alias)
User, group, or default mapping definition
LPOPTION environment variable with the -P docperms option
lpsnetdocperms set in the global tuning parameters
vm-m-m default
The priority if receiving a document from a trusted host when the document was submitted through the ROC Printer Monitor is as follows:
LPOVERRIDE environment variable with the -P docperms option
Alias definition with the -P docperms option (only if spooling to an alias)
User, group, or default mapping definition
LPOPTION environment variable with the -P docperms option
LPS_DOCPERMS environment variable
vm-m-m default
The priority if receiving a document from an untrusted Rhapsody or EasySpooler host when the document was submitted through a remote destination is as follows:
LPOVERRIDE environment variable with the -P docperms option
Alias definition with the -P docperms option (only if spooling to an alias)
Remote mapping definition
NOTE: If the remote mapping definition specifies document permissions, that value is used. If the Accept box is checked, the value of the document permissions in the incoming queue record is used.
LPOPTION environment variable with the -P docperms option
LPS_DOCPERMS environment variable
vm-m-m default
The priority if receiving a document from an untrusted non-Rhapsody or non-EasySpooler host when the document was submitted through lpr is as follows:
LPOVERRIDE environment variable with the -P docperms option
Alias definition with the -P docperms option (only if spooling to an alias)
Remote mapping definition
NOTE: If the remote mapping definition specifies document permissions, that value is used. If the Accept box is checked, the check is ignored because the lpr control record does not provide document permissions.
LPOPTION environment variable with the -P docperms option
lpsnetdocperms set in the global tuning parameters
vm-m-m default
The priority if receiving a document from an untrusted host when the document was submitted through the Printer Monitor is as follows:
LPOVERRIDE environment variable with the -P docperms option
Alias definition with the -P docperms option (only if spooling to an alias)
Remote mapping
NOTE: If the remote mapping definition specifies document permissions, that value is used. If the Accept box is checked, the check in the Accept box is ignored because the Printer Monitor does not provide document permissions.
LPOPTION environment variable with the -P docperms option
LPS_DOCPERMS environment variable
vm-m-m default
_______________________________
a. For information on trusted and untrusted hosts, see Files that Identify EasySpooler Hosts.
b. Only if the document was submitted through a remote destination running a pre 7.4 version of Rhapsody or EasySpooler.