Ricoh Aficio MP 5001 - Table 10: Rules Governing Access Explicitly; Table 11: List of Subjects, Information and Operation

Page 41 of 81
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.
Deleting document data
A general user process has permission to delete document
data if the general user ID associated with the general user
process matches either the document file owner ID or a
document file user ID in the document data ACL associated
with the document data, and if the matched ID has permission
for editing/deleting or full control permission.
FDP_ACF.1.3 The TSF shall explicitly authorise access of subjects to objects based on the following
additional rules: [assignment: rules that explicitly grant subject's operations on objects
shown in Table10].
Table 10: Rules governing access explicitly
Subject Operations on object Rules governing access
Administrator
process
Deleting document data
When the file administrator is included in administrator roles
that are associated with administrator process, the
administrator process has permission to delete all document
data stored in the D-BOX.
FDP_ACF.1.4 The TSF shall explicitly deny access of subjects to objects based on the [assignment: no
rules, based on security attributes that explicitly deny access of subjects to objects].
FDP_IFC.1 Subset information flow control
Hierarchical to: No other components.
Dependencies: FDP_IFF.1 Simple security attributes.
FDP_IFC.1.1 The TSF shall enforce the [assignment: telephone line information flow SFP] on
[assignment: subjects, information, and an operation listed in Table11].
Table 11: list of subjects, information and operation
Subjects Information Operation
- Fax process on Fax Unit
- Fax reception process on Controller Board
Data received from a telephone
line
Transferring
(Notes: "Transferring" means the Controller Board is receiving data through the Fax Unit from a telephone
line.)
FDP_IFF.1 Simple security attributes
Hierarchical to: No other components.
Dependencies: FDP_IFC.1 Subset information flow control
FMT_MSA.3 Static attribute initialisation.
FDP_IFF.1.1 The TSF shall enforce the [assignment: telephone line information flow SFP] based on the