Systems Seals
ADM003GVAE1005 339
Systems Seals
To ensure the integrity of the FuelsManager historical data, FuelsManager makes
use of Windows XP & 2000 folder, file and object-based security. All system data
stored in open format databases is configured with file security settings. The
System account has ownership, read, and write access, while all other accounts
have only read access.
FuelsManager services that write system data run under the System account
thereby providing write access to all users but only in accordance with the
FuelsManager Security configuration.
The FuelsManager application allows the W&M official to seal any open format
database, specifically the historical data stored in the Archive.MDB file (an MS
Access database). This sealing process is protected by the same W&M password
and integer seal ID mechanism used in the Module and Tag seals dialogs.
The process of sealing an Archive.MDB file sets the permissions on the file to:
• Everyone – Read / Execute
• System – Full Control
In addition, ownership of the file is set to System
In order for any user (administrator included) to make changes to the security of
the file they would need to take ownership of the file. If the archive is sealed
FuelsManager checks the ownership of the file whenever access to historical data
is required. If the ownership of the archive file is not System, then the data does
not appear as W&M approved.