Xerox WorkCentre 7855 - TOE Function Access Control SFP

Xerox Multi-Function Device Security Target
39
Copyright

2013 Xerox Corporation. All rights reserved.
Designation
Definition
+CPY
Indicates data that are associated with a copy job.
+faxIN
Indicates data that are associated with an inbound (received) fax job.
+faxOUT
Indicates data that are associated with an outbound (sent) fax job.
+DSR
Indicates data that are associated with a document storage and retrieval
job.
+SMI
Indicates data that are transmitted or received over a shared-medium
interface.
Application Note: IEEE Std. 2600.2-2009 specifies the contents of
FDP_ACC.1 for each function package that is claimed by a ST and a
Common Access Control SFP for D.FUNC and D.DOC (Operation: read). In
this ST, the SFPs for each package are combined with the Common Access
Control SFP then refined to form Table 21 (User Access Control SFP). The
User Access Control SFP represents more detail and a more restrictive
requirement than the combination of package SFPs and the Common Access
Control SFP. Hence the ST is conformant to IEEE Std. 2600.2-2009.
Application Note: A document (D.DOC) is “owned” by a User (U.User) if
that document was created or submitted to the TOE by that User. The only
exception are documents received as fax (D.DOC +faxIN), for which the
system administrators are considered as the owner. This is in conformance to
IEEE Std. 2600.2-2009 application note 94 and 95.
Application Note: Access control rules for the “Create” Operation are not
specified because typically, any authorized U.User can create his/her own
documents and cannot create documents that are owned by another User.
Application Note: IEEE Std. 2600.2-2009 defined attribute +DSR (see
Table 24) does not apply to D.FUNC, and in this ST is only applicable to
D.DOC with attribute +SCN. Attribute +SMI does not apply to this SFP.
6.2.3. TOE Function Access Control SFP
Users (U.NORMAL) require explicit authorization from system administrators
(U.ADMINISTRATOR (System Administrator)) for them to be allowed to
perform the following TOE Functions as defined in the IEEE Std. 2600.2-2009
SFR Packages in Section 12.3 via the Web UI or the LUI:
 Print (PRT)
 Scan (SCN)
 Fax (faxIN / faxOUT)
 Copy (CPY)
 Document Storage and Retrieval (DSR)