1 kumpf 1.2 // ===================================================================
2 // Title: User-Security Roles 2.7
3 // Filename: User27_Role.mof
4 // Version: 2.7.0
5 // Status: Final
6 // Date: 03/31/2003
7 // ===================================================================
8 // Copyright 2000-2003 Distributed Management Task Force, Inc. (DMTF).
9 // All rights reserved.
10 // DMTF is a not-for-profit association of industry members dedicated
11 // to promoting enterprise and systems management and interoperability.
12 // DMTF specifications and documents may be reproduced for uses
13 // consistent with this purpose by members and non-members,
14 // provided that correct attribution is given.
15 // As DMTF specifications may be revised from time to time,
16 // the particular version and release date should always be noted.
17 //
18 // Implementation of certain elements of this standard or proposed
19 // standard may be subject to third party patent rights, including
20 // provisional patent rights (herein "patent rights"). DMTF makes
21 // no representations to users of the standard as to the existence
22 kumpf 1.2 // of such rights, and is not responsible to recognize, disclose, or
23 // identify any or all such third party patent right, owners or
24 // claimants, nor for any incomplete or inaccurate identification or
25 // disclosure of such rights, owners or claimants. DMTF shall have no
26 // liability to any party, in any manner or circumstance, under any
27 // legal theory whatsoever, for failure to recognize, disclose, or
28 // identify any such third party patent rights, or for such party's
29 // reliance on the standard or incorporation thereof in its product,
30 // protocols or testing procedures. DMTF shall have no liability to
31 // any party implementing such standard, whether such implementation
32 // is foreseeable or not, nor to any patent owner or claimant, and shall
33 // have no liability or responsibility for costs or losses incurred if
34 // a standard is withdrawn or modified after publication, and shall be
35 // indemnified and held harmless by any party implementing the
36 // standard from any and all claims of infringement by a patent owner
37 // for such implementations.
38 //
39 // For information about patents held by third-parties which have
40 // notified the DMTF that, in their opinion, such patent may relate to
41 // or impact implementations of DMTF standards, visit
42 // http://www.dmtf.org/about/policies/disclosures.php.
43 kumpf 1.2 // ===================================================================
44 // Description: The User Model extends the management concepts that
45 // are related to users and security.
46 // This file defines the concepts and classes for roles.
47 //
48 // The object classes below are listed in an order that
49 // avoids forward references. Required objects, defined
50 // by other working groups, are omitted.
51 // ===================================================================
52 // Change Log for v2.7
53 // (ERRATA) CR855 - Change cardinality of the Antecedent from 0..1
54 // to 1 for MoreOrganizationInfo and MoreOrgUnitInfo
55 // ===================================================================
56
57 #pragma Locale ("en_US")
58
59
60 // ==================================================================
61 // Role
62 // ==================================================================
63 [Version ("2.6.0"), Description (
64 kumpf 1.2 "The Role object class is used to represent a position or set of "
65 "responsibilities within an organization, organizational unit or "
66 "system administration scope and is filled by a person or persons "
67 "(or non-human entities represented by ManagedSystemElement "
68 "subclasses) that may be explicitly or implicitly members of this "
69 "collection subclass. The class is defined so as to incorporate "
70 "commonly-used LDAP attributes to permit implementations to "
71 "easily derive this information from LDAP-accessible directories. "
72 "The members of a role are frequently called role occupants. "
73 "This class's properties are a subset of a related class, "
74 "OtherRoleInformation, which defines all the group properties "
75 "and in array form for directory compatibility.") ]
76 class CIM_Role : CIM_Collection {
77
78 [Key, MaxLen (256), Description (
79 "CreationClassName indicates the name of the class or the "
80 "subclass used in the creation of an instance. When used "
81 "with the other key properties of this class, this property "
82 "allows all instances of this class and its subclasses to "
83 "be uniquely identified.") ]
84 string CreationClassName;
85 kumpf 1.2
86 [Key, MaxLen (1024),Description (
87 "The Name property defines the label by which the object is "
88 "known. In the case of an LDAP-derived instance, the Name "
89 "property value may be set to the distinguishedName of the "
90 "LDAP-accessed object instance.") ]
91 string Name;
92
93 [MaxLen (128), Description (
94 "This property may be used to describe the kind of business "
95 "activity performed by the members (role occupants) in the "
96 "position or set of responsibilities represented by the "
97 "Role.") ]
98 string BusinessCategory;
99
100 [Required, Description (
101 "A Common Name is a (possibly ambiguous) name by which the "
102 "role is commonly known in some limited scope (such as an "
103 "organization) and conforms to the naming conventions of the "
104 "country or culture with which it is associated.") ]
105 string CommonName;
106 kumpf 1.2 };
107
108
109 // ==================================================================
110 // OtherRoleInformation
111 // ==================================================================
112 [Version ("2.6.0"), Description (
113 "The OtherRoleInformation class is used to provide additional "
114 "information about an associated Role instance. This class is "
115 "defined so as to incorporate commonly-used LDAP attributes to "
116 "permit implementations to easily derive this information from "
117 "LDAP-accessible directories.") ]
118 class CIM_OtherRoleInformation : CIM_ManagedElement {
119
120 [Key, MaxLen (256), Description (
121 "CreationClassName indicates the name of the class or the "
122 "subclass used in the creation of an instance. When used "
123 "with the other key properties of this class, this property "
124 "allows all instances of this class and its subclasses to "
125 "be uniquely identified.") ]
126 string CreationClassName;
127 kumpf 1.2
128 [Key, MaxLen (1024),Description (
129 "The Name property defines the label by which the object is "
130 "known. In the case of an LDAP-derived instance, the Name "
131 "property value may be set to the distinguishedName of the "
132 "LDAP-accessed object instance.") ]
133 string Name;
134
135 [Description (
136 "In the case of an LDAP-derived instance, the ObjectClass "
137 "property value(s) may be set to the objectClass attribute "
138 "values.") ]
139 string ObjectClass[];
140
141 [MaxLen (128), Description (
142 "This property may be used to describe the kind of business "
143 "activity performed by the members (role occupants) in the "
144 "position or set of responsibilities represented by the "
145 "Role.") ]
146 string BusinessCategory[];
147
148 kumpf 1.2 [Description (
149 "A Common Name is a (possibly ambiguous) name by which the "
150 "role is commonly known in some limited scope (such as an "
151 "organization) and conforms to the naming conventions of the "
152 "country or culture with which it is associated.") ]
153 string CommonName[];
154
155 [MaxLen (1024), Description (
156 "The Descriptions property values may contain human-readable "
157 "descriptions of the object. In the case of an LDAP-derived "
158 "instance, the description attribute may have multiple values "
159 "that, therefore, cannot be placed in the inherited "
160 "Description property.") ]
161 string Descriptions[];
162
163 [MaxLen (128), Description (
164 "This property is used for the role occupants' telegram "
165 "service.") ]
166 string DestinationIndicator[];
167
168 [Description (
169 kumpf 1.2 "The role occupants' facsimile telephone number.") ]
170 string FacsimileTelephoneNumber[];
171
172 [MaxLen (16), Description (
173 "The role occupants' International ISDN number.") ]
174 string InternationaliSDNNumber[];
175
176 [Description (
177 "The name of an organizational unit related to the role.") ]
178 string OU[];
179
180 [MaxLen (128), Description (
181 "The Physical Delivery Office Name property specifies the name "
182 "of the city, village, etc. where a physical delivery office "
183 "is situated.") ]
184 string PhysicalDeliveryOfficeName[];
185
186 [Description (
187 "The Postal Address property values specify the address "
188 "information required for the physical delivery of postal "
189 "messages by the postal authority to the role occupants.") ]
190 kumpf 1.2 string PostalAddress[];
191
192 [MaxLen (40), Description (
193 "The Postal Code property specifies the postal code for the "
194 "role occupants. If this value is present it will be part of "
195 "the object's postal address.") ]
196 string PostalCode[];
197
198 [MaxLen (40), Description (
199 "The Post Office Box property specifies the Post Office Box "
200 "by which the role occupants will receive physical postal "
201 "delivery. If present, the property value is part of the "
202 "object's postal address.") ]
203 string PostOfficeBox[];
204
205 [Description (
206 "The Preferred Delivery Method property specifies the "
207 "role occupants' preferred method to be used for contacting "
208 "them in their role.") ]
209 string PreferredDeliveryMethod;
210
211 kumpf 1.2 [Description (
212 "This property specifies a postal address suitable for receipt "
213 "of telegrams or expedited documents, where it is necessary to "
214 "have the recipient accept delivery.") ]
215 string RegisteredAddress[];
216
217 [Description (
218 "In the case of an LDAP-derived instance, the See Also "
219 "property specifies distinguishedName of other Directory "
220 "objects which may be other aspects (in some sense) of the "
221 "same real world object.") ]
222 string SeeAlso[];
223
224 [Description (
225 "The State or Province Name property specifies a state or "
226 "province.") ]
227 string StateOrProvince[];
228
229 [MaxLen (128), Description (
230 "The Street Address property specifies a site for the local "
231 "distribution and physical delivery in a postal address, i.e. "
232 kumpf 1.2 "the street name, place, avenue, and the number.") ]
233 string Street[];
234
235 [MaxLen (32), Description (
236 "The Telephone Number property specifies a telephone number of "
237 "the role occupants, e.g. + 44 582 10101).") ]
238 string TelephoneNumber[];
239
240 [Description (
241 "The Teletex Terminal Identifier property specifies the "
242 "Teletex terminal identifier (and, optionally, parameters) for "
243 "a teletex terminal associated with the role occupants.") ]
244 string TeletexTerminalIdentifier[];
245
246 [Description (
247 "The Telex Number property specifies the telex number, country "
248 "code, and answerback code of a telex terminal for the "
249 "role occupants.") ]
250 string TelexNumber[];
251
252 [MaxLen (15), Description (
253 kumpf 1.2 "An X.121 address for the role occupants.") ]
254 string X121Address[];
255 };
256
257
258 // ==================================================================
259 // MoreRoleInfo
260 // ==================================================================
261 [Association, Version ("2.7.0"), Description (
262 "CIM_MoreRoleInfo is an association used to extend the "
263 "information in a CIM_Role class instance.") ]
264 class CIM_MoreRoleInfo : CIM_Dependency {
265
266 [Min (1), Max (1), Override ("Antecedent"),
267 Description ("The Role which has more information.") ]
268 CIM_Role REF Antecedent;
269
270 [Max (1), Override ("Dependent"),
271 Description ("Additional data concerning the Role.") ]
272 CIM_OtherRoleInformation REF Dependent;
273 };
274 kumpf 1.2
275
276 // ==================================================================
277 // SystemAdministratorRole
278 // ==================================================================
279 [Association, Version ("2.6.0"), Description (
280 "CIM_SystemAdministratorRole is an association used to identify "
281 "a system administrator Role for a CIM_System.") ]
282 class CIM_SystemAdministratorRole : CIM_Dependency {
283
284 [Override ("Antecedent"),
285 Description ("The administered system.") ]
286 CIM_System REF Antecedent;
287
288 [Override ("Dependent"),
289 Description ("The system administration role.") ]
290 CIM_Role REF Dependent;
291 };
292
293
294 // ===================================================================
295 kumpf 1.2 // end of file
296 // ===================================================================
|