1 karl  1.1 // ===================================================================
  2           // Title:       User-Security Security Services
  3           // $State: Preliminary $
  4           // $Date: 2004/06/25 17:56:15 $
  5           // $Source: /home/dmtf2/dotorg/var/cvs/repositories/dev/Schema/MOF/User_SecurityServices.mof,v $
  6           // $Revision: 1.2 $
  7           // ===================================================================
  8           //#pragma inLine ("Includes/copyright.inc")
  9           // Copyright 1998-2004 Distributed Management Task Force, Inc. (DMTF).
 10           // All rights reserved.
 11           // DMTF is a not-for-profit association of industry members dedicated
 12           // to promoting enterprise and systems management and interoperability.
 13           // DMTF specifications and documents may be reproduced for uses
 14           // consistent with this purpose by members and non-members,
 15           // provided that correct attribution is given.
 16           // As DMTF specifications may be revised from time to time,
 17           // the particular version and release date should always be noted.
 18           // 
 19           // Implementation of certain elements of this standard or proposed
 20           // standard may be subject to third party patent rights, including
 21           // provisional patent rights (herein "patent rights"). DMTF makes
 22 karl  1.1 // no representations to users of the standard as to the existence
 23           // of such rights, and is not responsible to recognize, disclose, or
 24           // identify any or all such third party patent right, owners or
 25           // claimants, nor for any incomplete or inaccurate identification or
 26           // disclosure of such rights, owners or claimants. DMTF shall have no
 27           // liability to any party, in any manner or circumstance, under any
 28           // legal theory whatsoever, for failure to recognize, disclose, or
 29           // identify any such third party patent rights, or for such party's
 30           // reliance on the standard or incorporation thereof in its product,
 31           // protocols or testing procedures. DMTF shall have no liability to
 32           // any party implementing such standard, whether such implementation
 33           // is foreseeable or not, nor to any patent owner or claimant, and shall
 34           // have no liability or responsibility for costs or losses incurred if
 35           // a standard is withdrawn or modified after publication, and shall be
 36           // indemnified and held harmless by any party implementing the
 37           // standard from any and all claims of infringement by a patent owner
 38           // for such implementations.
 39           // 
 40           // For information about patents held by third-parties which have
 41           // notified the DMTF that, in their opinion, such patent may relate to
 42           // or impact implementations of DMTF standards, visit
 43 karl  1.1 // http://www.dmtf.org/about/policies/disclosures.php.
 44           //#pragma inLine
 45           // ===================================================================
 46           // Description: The User Model extends the management concepts that
 47           //              are related to users and security.
 48           //              This file defines the generic concepts of various
 49           //              authentication and authorization security services.
 50           // 
 51           //              The object classes below are listed in an order that
 52           //              avoids forward references. Required objects, defined
 53           //              by other working groups, are omitted.
 54           // ===================================================================
 55           // Change Log for v2.8 Final:
 56           //  CR1235 - Accepted all Description changes in V2.8 Preliminary
 57           // 
 58           // Change Log for v2.8 Preliminary:
 59           //  CR1013: Updated the Descriptions for AuthenticationService and
 60           //             AuthorizationService
 61           // 
 62           // Change Log for v2.7
 63           //  CR965 - Updated the Description for SecurityServiceForSystem
 64 karl  1.1 // ===================================================================
 65           
 66           #pragma Locale ("en_US")
 67           
 68           
 69           // ==================================================================
 70           // SecurityService
 71           // ==================================================================
 72              [Abstract, Version ( "2.6.0" ), Description (
 73                  "A service providing security functionaity.")]
 74           class CIM_SecurityService : CIM_Service {
 75           };
 76           
 77           
 78           // ===================================================================
 79           // ServiceUsesSecurityService
 80           // ===================================================================
 81              [Association, Version ( "2.6.0" ), Description (
 82                  "This relationship associates a Service with the Security "
 83                  "Services that it uses.")]
 84           class CIM_ServiceUsesSecurityService : CIM_ServiceServiceDependency {
 85 karl  1.1 
 86                 [Override ( "Antecedent" )]
 87              CIM_SecurityService REF Antecedent;
 88           
 89                 [Override ( "Dependent" )]
 90              CIM_Service REF Dependent;
 91           };
 92           
 93           
 94           // ===================================================================
 95           // SecurityServiceForSystem
 96           // ===================================================================
 97              [Association, Version ( "2.6.0" ), Description (
 98                  "The CIM_SecurityServiceForSystem provides the association "
 99                  "between a System and a SecurityService that provides services "
100                  "for that system. Examining the SecurityServiceForSystem class "
101                  "definition, note that its superclass ProvidesServiceToElement "
102                  "is deprecated. Unfortunately, ProvidesServiceToElement cannot "
103                  "be removed from the object hierarchy without a major Schema "
104                  "release. When/if this occurs, the ProvidesServiceToElement "
105                  "superclass will be removed, and SecurityServiceForSystem will "
106 karl  1.1        "subclass from CIM_Dependency directly.")]
107           class CIM_SecurityServiceForSystem : CIM_ProvidesServiceToElement {
108           
109                 [Override ( "Antecedent" ), Description (
110                     "The SecurityService that provides services for the system.")]
111              CIM_SecurityService REF Antecedent;
112           
113                 [Override ( "Dependent" ), Description (
114                     "The system that is dependent on the security service.")]
115              CIM_System REF Dependent;
116           };
117           
118           
119           // ==================================================================
120           // AuthenticationService
121           // ==================================================================
122              [Version ( "2.8.0" ), Description (
123                  "CIM_AuthenticationService verifies users' identities through "
124                  "some means. These services are decomposed into a subclass that "
125                  "provides credentials to users and a subclass that provides for "
126                  "the verification of the validity of a credential and, perhaps, "
127 karl  1.1        "the appropriateness of its use for access to target resources. "
128                  "The persistent state information used from one such "
129                  "verification to another is maintained in an instance of "
130                  "Identity class.")]
131           class CIM_AuthenticationService : CIM_SecurityService {
132           };
133           
134           
135           // ==================================================================
136           // VerificationService
137           // ==================================================================
138              [Version ( "2.6.0" ), Description (
139                  "CIM_VerificationService is the authentication service that "
140                  "verifies a credential for use and may also verify the "
141                  "appropriateness of a particular credential in conjunction with "
142                  "a particular target resource.")]
143           class CIM_VerificationService : CIM_AuthenticationService {
144           };
145           
146           
147           // ==================================================================
148 karl  1.1 // CredentialManagementService
149           // ==================================================================
150              [Version ( "2.6.0" ), Description (
151                  "CIM_CredentialManagementService issues credentials and manages "
152                  "the credential lifecycle.")]
153           class CIM_CredentialManagementService : CIM_AuthenticationService {
154           };
155           
156           
157           // ==================================================================
158           // TrustHierarchy
159           // ==================================================================
160              [Association, Version ( "2.6.0" ), Description (
161                  "CIM_TrustHierarchy is an association between two "
162                  "CredentialManagementService instances that establishes the "
163                  "trust hierarchy between them.")]
164           class CIM_TrustHierarchy : CIM_Dependency {
165           
166                 [Override ( "Antecedent" ), Max ( 1 ), Description (
167                     "The superior CredentialManagementService from which the "
168                     "dependent service gets its authority.")]
169 karl  1.1    CIM_CredentialManagementService  REF Antecedent;
170           
171                 [Override ( "Dependent" ), Description (
172                     "The subordinate CredentialManagementService.")]
173              CIM_CredentialManagementService  REF Dependent;
174           };
175           
176           
177           // ==================================================================
178           // CredentialManagementSAP
179           // ==================================================================
180              [Version ( "2.6.0" ), Description (
181                  "CIM_CredentialManagementSAP represents the ability to utilize "
182                  "or invoke a CredentialManagementService.")]
183           class CIM_CredentialManagementSAP : CIM_ServiceAccessPoint {
184           
185                 [Description (
186                     "The URL for the access point.")]
187              string URL;
188           };
189           
190 karl  1.1 
191           // ==================================================================
192           // LocalCredentialManagementService
193           // ==================================================================
194              [Version ( "2.6.0" ), Description (
195                  "CIM_LocalCredentialManagementService is a credential "
196                  "management service that provides management of credentials "
197                  "used by the local system.")]
198           class CIM_LocalCredentialManagementService : CIM_CredentialManagementService {
199           };
200           
201           
202           // ==================================================================
203           // AuthorizationService
204           // ==================================================================
205              [Version ( "2.8.0" ), Description (
206                  "CIM_AuthorizationService determines whether an Identity, "
207                  "established by an AuthorizationService, is permitted access to "
208                  "a resource or set of resources.")]
209           class CIM_AuthorizationService : CIM_SecurityService {
210           };
211 karl  1.1 
212           
213           // ===================================================================
214           // end of file
215           // ===================================================================