Service Processors

7.13
Working in the Policy Tab
3PAR Secure Service Policy Manager User’s Guide
Figure 7-8. Selecting an Access Right
2 Select the appropriate access right.
3 Repeat step 1 and step 2 as necessary.
4 Click Done on the lower right-hand corner of the Policy tab.
5 When prompted for confirmation of the changed policy, click OK.
The View or change the policy settings for <Group Name> page refreshes and
displays the newly set access right(s).
7.2.4.1 Software Management Package Access Rights
Software management packages are NOT broken into components. This can lead to actions
being performed on a device without consent. For example, if a Run Script action has a Never
Allow access right, and a Package action has an Always Allow access right, and a script is
created in a package, the package permission supersedes that script’s access right. The
Custodian sees the Package action and executes it automatically (because it has an Always
Allow access right). The Custodian and Policy Manager do not see the script in the package.
The action of accepting or denying the execution of a package on a device applies to the entire
contents of the package. If an explicit access right exists for a specific package (name and
version), the Custodian enforces the permission on that package as instructed. If an explicit
access right does not exist for a specific package, the Custodian examines the contents of the
package and processes the package based on the following rules:
■ If every action in the package, including rollback actions, has an Always Allow access
right, the Custodian processes the entire package.