semi合集-English.pdf - 第3362页

SEMI E132-0305 © SEMI 2004, 2005 15 bad session id. error Operation not authorized. error Structured data, of type UnauthorizedOperationError, Secti on 12.3. 3.1. 12.3.2.5 GetActiveSessions — This operation allows the se…

100%1 / 7923
SEMI E132-0305 © SEMI 2004, 2005 14
Parameter Description Kind Form
ACL Returned ACL of equipment. Null list is returned if no ACL
entries are defined.
OUT Unordered list of types
derived from ACLEntry,
Section 11.2.4.
error Unrecognized session. error Text, equal to unrecognized
session error, including the
bad session id.
error Operation not authorized. error Structured data, of type
UnauthorizedOperationError,
Section 12.3.3.1.
12.3.2.3 AddACLEntry — This operation adds a new ACL entry to the equipment’s ACL. If the ACLEntry is a
PrivilegeAssignment or a RoleAssignment for a Principal or Role that already has a PrivilegeAssignment or
RoleAssignment ACLEntry, the equipment shall return an error. If the ACLEntry is a PrivilegeAssignment and
refers to privilege id’s that are not supported by the equipment, the equipment shall return an error. If the ACLEntry
is a RoleAssignment and refers to a Role that does not have a PrivilegeAssignment ACLEntry defined, the
equipment shall return an error. If the ACLEntry is a RoleAssignment or PrivilegeAssignment that would result in
more than one Principal having the SecurityAdmin privilege (see Section 11.2.10.3), the equipment shall return an
error. Otherwise, the equipment shall store the newly-added ACLEntry together with the rest of the ACL in non-
volatile memory.
Table 15 AddACLEntry Parameter Definitions
Parameter Description Kind Form
aclEntry New ACL entry to be added. IN Structured data of type
ACLEntry, Section 11.2.4.
error Duplicate entry found. error Text equal to duplicate
principal/role name error.
error Unrecognized role. error Text equal to unrecognized
role error.
error Unrecognized privilege. error Structured data, of type
UnrecognizedPrivilegeError,
Section 12.3.3.3.
error Unrecognized session. error Text, equal to unrecognized
session error, including the
bad session id.
error Operation not authorized. error Structured data, of type
UnauthorizedOperationError,
Section 12.3.3.1.
12.3.2.4 DeleteACLEntry — This service removes an ACL entry from equipment’s ACL. The deletion of an
ACLEntry that has been applied to one or more active sessions does not affect the privileges granted to that session,
nor does it terminate any such session. Attempts to establish new sessions by a Principal whose
PrivilegeAssignment or RoleAssignment ACLEntry has been deleted shall be rejected by the equipment until a new
ACL entry is created for that Principal, or unless there is an ACLEntry for the reserved “anyPrincipal” (see Section
11.2.8). It is an error to delete a PrivilegeAssignment ACLEntry for a Role when there are still Principals assigned
to that Role through a RoleAssignment ACLEntry.
Table 16 DeleteACLEntry Parameter Definitions
Parameter Description Kind Form
subjectId Identifies the ACL entry to be deleted by the id of subject. IN Text
error Entry not found. error Text, equal to ACL entry not
found error.
error Unrecognized session. error Text, equal to unrecognized
session error, including the
SEMI E132-0305 © SEMI 2004, 2005 15
bad session id.
error Operation not authorized. error Structured data, of type
UnauthorizedOperationError,
Section 12.3.3.1.
12.3.2.5 GetActiveSessions — This operation allows the security admin to retrieve information for all active non-
admin sessions currently established on the equipment.
Table 17 GetActiveSessions Parameter Definitions
Parameter Description Kind Form
activeSessions List of active non-admin sessions on the equipment. An empty
list is returned if there are no active sessions.
OUT Unordered list, of type
ActiveSession, Section
12.3.3.4.
error Unrecognized session. error Text, equal to unrecognized
session error, including the
bad session id.
error Operation not authorized. error Structured data, of type
UnauthorizedOperationError,
Section 12.3.3.1.
12.3.2.6 SetMaxSessions — This operation allows the security admin to set the maximum number of simultaneous
non-admin sessions that the equipment will allow. This limit only applies to new session requests not coming from
the security admin, current established sessions are not affected. If the number of current active sessions exceeds
this limit, any new non-admin session requests shall be rejected by the equipment. New session requests are
authenticated first to determine if the client is not the security admin, then the check on the limit is made to
determine whether or not to reject the request. Setting this limit to 0 will restrict to security admin sessions only.
Table 18 SetMaxSessions Parameter Definitions
Parameter Description Kind Form
maxSessions Limit on number of simultaneous non-admin sessions equipment
will allow.
IN Integer.
sessionCount Total count of all current authenticated non-admin sessions on
equipment.
OUT Integer.
error Unrecognized session. error Text, equal to unrecognized
session error, including the
bad session id.
error Operation not authorized. error Structured data, of type
UnauthorizedOperationError,
Section 12.3.3.1.
12.3.2.7 GetMaxSessions — his operation retrieves the current maximum limit of simultaneous non-admin sessions
set on equipment.
Table 19 GetMaxSession Parameter Definitions
Parameter Description Kind Form
maxSessions Limit on number of simultaneous non-admin sessions equipment
will allow.
OUT Integer
sessionCount Total count of all current authenticated non-admin sessions on
equipment.
OUT Integer
error Unrecognized session. error Text, equal to unrecognized
session error, including the
bad session id.
SEMI E132-0305 © SEMI 2004, 2005 16
Parameter Description Kind Form
error Operation not authorized. error Structured data, of type
UnauthorizedOperationError,
Section 12.3.3.1.
12.3.3 Type Definitions
12.3.3.1 UnauthorizedOperationError — This class describes an authorization error associated with a specific
operation.
description
UnauthorizedOperationError
privilege Id
Privilege
1
+requiredPrivileges
1..*
Figure 9
UnauthorizedOperationError Description
Table 20 UnauthorizedOperationError Attribute Definitions
Attribute Name Definition Form
description Description of error. Text, including name of operation
and any important context
information associated with
original request.
Table 21 UnauthorizedOperationError Association Definitions
Attribute Name Definition Form
requiredPrivileges List of one or more privileges that grant authorization for the requested
operation.
List of one or more elements of
type Privilege, Section 11.2.10.
12.3.3.2 UnrecognizedPrivilegeError — This class describes an error where one or more privileges are not
recognized by the equipment.
description
UnrecognizedPrivilegeError
privilege Id
Privilege
1
+unrecognizedPrivileges
1..*
Figure 10
UnrecognizedPrivilegeError Description
Table 22 UnrecognizedPrivilegeError Attribute Definitions
Attribute Name Definition Form
description Description of error. Text, including name of operation
and any important context
information associated with
original request.