Life is much easier to start with structured security security string, sorted with a prefix A_, B_, This way the string fields do net get mingled with and/or and do not switch position Great with the inherritance, great to use in combination with the locator. Easy for the group and user access And we re-use this string in our notificaton scipts, to see which containers / element need specific notification, ( SMS, Ticket, escallation, Mail ) For every Security string we do retrieve additionbal parameters in the notif scripts ( ex Classification type, item ) to include in the incident tickets.
example A_TOPLEVEL A_TOPLEVEL|B_CUSTOMERNAME A_TOPLEVEL|B_CUSTOMERNAME|C_CUSTOMERNAME_SERVICELINE A_TOPLEVEL|B_CUSTOMERNAME|C_CUSTOMERNAME_SERVICELINE|D_SERVICEWINDOW_SLA practical example on container below Universe named CA A_TOPLEVEL|B_CA Lan containers for every country below CA, named BE_CA, UK_CA A_TOPLEVEL|B_CA ( Notification always to network with specific SLA ) Lan containers for every technology below UK_CA Network containers A_TOPLEVEL|B_CA|C_CA_BE-NetworkOPerations|D_D10 ( D10 is 24/24 7/7 with specific SLA ) Network containers with other service Window A_TOPLEVEL|B_CA|C_CA_BE-NetworkOPerations|D_D5 System containers A_TOPLEVEL|B_CA|C_CA_BE-BOOPerations|D_D5 ( D5 is BH 5/7 with specific SLA ) ESX-farm containers A_TOPLEVEL|B_CA|C_CA_BE-ESXOPerations|D_D5 ( D5 is BH 5/7 with specific SLA ) Rgrds, De Munter Erwin -----Original Message----- From: Oliver Pätzold [mailto:[email protected]] Sent: maandag 2 november 2009 15:25 To: spectrum Subject: Re: [spectrum] Security string not able to change Hi, only Containers (LAN, Networks, etc) will inherit Security Strings to child Models with an OR-Operator. This happends automaticly and straight. If you add in Universe a String every Container and Model get this security string and you can't delete them in downtree model. Global Collects doesn't inherit any Security String, so you should check, that your users can see these models normaly in topology. You can't set access by editing the Security directly to the device, because these Security Strings will be added by AND-Operator with inherit Security String from parent. If there is nothing set, Spectrum takes default ADMIN string with an & to your added string. Examples; Security String "Cust1|Cust2" on Device would be inherit by any parent Network Containers in Topologie. This means Cust1 or Cust2 would be needed by the user to show this device. Security String "Cust1&Routers" on a Device, where on Stringpart is set on a parent Container and the other one directly on the device, means the user needs both strings to access this device. By the way setting Security Stings isn't trivial, because compinations of AND and OR Operators can makes life hard. Greets Oliver -- Gruß Oliver Pätzold DB Systel GmbH Betrieb IP (T.SIN 14) Kleyerstraße 27, 60326 Frankfurt am Main, E EG 01 Tel. 069 / 265-17397, Fax 069 / 265-36230, intern 955- Mobil: 0160 / 97408742 _________________________________________________________________________________ Das Reiseportal im Internet >> http://www.bahn.de Sitz der Gesellschaft: Frankfurt am Main Registergericht: Frankfurt am Main, HRB 78707 USt-IdNr.: DE252204770 Geschäftsführer: Detlef Exner (Vorsitzender), Norbert Becker, Dr. Burkhard Klanke, Dr. Klaus Rüffler Vorsitzender des Aufsichtsrates: Dr. Rolf Kranüchel 2009/10/30 Cashell, Christopher P. <[email protected]>: > Do you have ADMIN set as the security string at the Universe? If you set a > security string on the Universe, it will be inherited by all devices below > it, and you will not be able to change it (setting it at the Universe locks > the security string to matching the Universe). > > > > Also, setting a security string on a global collection doesn't distribute it > down to devices in the collection. That only controls whether a user can > see the collection. > > > > -- > > Christopher > > > > From: CATools Helpdesk [mailto:[email protected]] > Sent: Friday, October 30, 2009 4:16 AM > To: spectrum > Subject: [spectrum] Security string not able to change > > > > Hi, > > We are trying to give the access for the global collection with the some > security string, but for the some devices are not visible to the users. > > We checked for the security string for that devices its showing only ADMIN. > > When we tried to add with 'ADMIN|xyz' but its not accepting that it's > showing security string ADMIN only. > > So how to add the security string for that device. > > > > Thanks in advance. > > > > Thanks & Regards, > > Sachin Bhor > > --Disclaimer-- This email and any files transmitted with it are confidential > and intended solely for the use of the entity to which they are addressed. > If you have received this email in error please notify the sender > immediately. Please note that any views presented in the email are solely > those of the author and do not necessarily represent those of the > organization. While all care has been taken to avoid viruses the recipient > is advised to check this email and attachments for presence of viruses. The > organization accepts no liability on this account. Mails may be stored for > monitoring and review. > > --To unsubscribe from spectrum, send email to [email protected] with the > body: unsubscribe spectrum [email protected] > > --To unsubscribe from spectrum, send email to [email protected] with the > body: unsubscribe spectrum [email protected] --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected] --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
