Ricoh Mp 3351 User Guide

  Page 41 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.  Deleting document data A general user process has permission to delete document 
data if the general user ID associated with the general user 
process matches either the document file owner ID or a 
document file user ID in the document data ACL associated 
with the document data, and if the matched ID has permission 
for editing/deleting or full control permission.  
FDP_ACF.1.3 The TSF shall explicitly authorise access of...

  Page 42 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.  following types of subject and information security attributes: [assignment: subjects or 
information and their corresponding security attributes shown in Table 12]. 
Table 12: Security attributes corresponding to subjects or information Type Subjects or information Security attributes Subject Fax process on Fax Unit No security attributes Subject Fax reception process on Controller Board No security attributes Information Data...

  Page 43 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.  User authentication using TOE from client computer Web browser User authentication when printing from client computer User authentication when faxing from client computer  
FIA_AFL.1.2 When defined number of unsuccessful authentication attempts has been [selection: met], the 
TSF shall [assignment: Lockout the user, who has failed the authentication attempts, 
until one of the Lockout release actions, shown in Table 14, is...

  Page 44 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.  Numbers: [0-9] (10 digits) 
Symbols: SP (spaces) !  # $ % &  ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~ (33 symbols) 
(2) Registerable password length: 
For general users 
No fewer than the Minimum Password Length specified by the user administrator (8-32 
characters) and no more than 128 characters. 
For administrators and a supervisor 
No fewer than the Minimum Password Length specified by the user administrator (8-32...

  Page 45 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.  administrator IDs, administrator roles and supervisor ID]. 
 
FIA_USB.1.2 The TSF shall enforce the following rules on the initial association of user security attributes 
with subjects acting on the behalf of users: [assignment: rules for the initial association of 
attributes listed in Table 15]. 
Table 15: Rules for initial association of attributes Users Subjects Security attributes of users General user General user...

  Page 46 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved. Security attributes Operations User roles Query - General users Newly create - Administrators Query, 
change - Administrators who own the administrator IDs Administrator IDs 
Query - Supervisor Administrator roles Query, 
add, 
delete - Administrators who are assigned these administrator 
roles Supervisor ID Query, 
change - Supervisor Document data ACL Query, 
modify - File administrator 
- Document file owner 
- General users...

  Page 47 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.  Hierarchical to: No other components. 
Dependencies: FMT_SMR.1 Security roles 
FMT_SMF.1 Specification of Management Functions 
FMT_MTD.1.1 The TSF shall restrict the ability to [selection: query, modify, delete, [assignment: register, 
change, entirely delete, newly create]] the [assignment: list of TSF data management in 
Table 18] to [assignment: roles in Table 18]. 
Table 18: List of TSF data management TSF data Operations...

  Page 48 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved. TSF data Operations User roles Query General users, 
User administrator, 
Network administrator, 
File administrator, 
Supervisor Lockout Flag for general users Query, 
modify User administrator Lockout Flag for administrators Query, 
modify Supervisor Lockout Flag for supervisor Query, 
modify Machine administrator Query, 
newly create, 
delete, 
change User administrator 
Applicable general users of S/MIME user 
information...

  Page 49 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved. Functional requirements Management requirements Management items FDP_ACF.1 a) Managing the attributes used to make 
explicit access or denial based 
decisions. a) Management of the file administrator 
from administrator roles. FDP_IFC.1 None - FDP_IFF.1 a) Managing the attributes used to make 
explicit access based decisions. None: Attributes (data type) used to make 
explicit access-based decisions are fixed 
and there are no...

  Page 50 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved. Functional requirements Management requirements Management items - Security Management Function 
(management of supervisor information): 
management of supervisor authentication 
information by supervisor. FIA_UAU.7 None - FIA_UID.2 a) Management of the user identities. - Security Management Function 
(management of general user 
information): management of general user 
IDs by the user administrator. 
- Security Management...