Introduction to TRANSFER Delivery System

Depot Security The TRANSFER Environment

2-14 109426—Introduction to TRANSFER Delivery System

Depot Security

TRANSFER protects the information in a depot from unauthorized access. It provides

four different levels of security for different kinds of correspondents:

■ Administrators with write privileges

Users with system administrative write privileges can create and delete any

correspondent, interest group (except the PUBLIC group, which is automatically

created and maintained on each node), folder (except the permanent special folders,

the INBOX, the OUTLOG, and the WASTEBASKET), or distribution list on the

node. In addition, these users can read the profile attributes of any correspondent,

interest group, folder, or distribution list on the node and have the authority to

modify many of these attributes. They cannot read the contents of others’ packages

or scan their folders.

Each node must have at least one user with system administrative write privileges to

■ Administrators with read privileges

Users with system administrative read privileges can examine, but not change, the

distribution lists, folder names, or profile attributes of any correspondent’s or

interest group’s depot on the node. They cannot read the contents of others’

packages or scan their folders.

■ Depot owners

Depot owners can create new folders, distribution lists, items, and packages at their

own depots; make additions or changes to any of the objects they created; and

change many elements of their own basic profiles. They cannot alter their own

profiles to become system administrators. Privileges can be granted only by a

system administrator.

Depot owners are the only ones who can examine or change the contents of folders

belonging to their depots. They cannot change packages or any component items of

packages received from other depots; they can, however, make copies of packages

or items and then change the copies.

■ Other correspondents

Correspondents have limited access to the depots of other correspondents. Any

correspondent can read the names of the members of any distribution list on that

node. Any correspondent can get a list of all correspondents at any node. Any

correspondent can use the distribution lists belonging to another correspondent.