General Sun JES Directory Questions

Question

I'm doing some research for a program at work. I have a few general questions that I hope someone knowledgeable about the Sun JES directory can answer.
1. How does the Sun Directory control access to resources?
2. How are groups formed and maintained?
3. How does the whole access control scheme work?
I know these are very broad, but any info you can either provide me or direct me too will be greatly appreciated. I haven't had much luck researching this online. Thank you.

Answer 1

The Sun ONE Directory controls access to resources usually using aci's, which can be created at different branch points and allow differing permissions. This can also be done using RBAC (Role Based Access Control), where a role can be created, assigned to a user object and then aci's assigned to that role.
There is a chapter in the Administration Guide on permissions and setting them in the directory.
With regards Groups, there are two kinds, Static and Dynamic. Static Groups are defined by users creating them and then manually assigning user objects to them. Dynamic groups are created by LDAP searches which populate the groups based on an attribute or search criteria which links all the members.
You can set aci's to the branch points in the directory dependent on group membership if so required.
The chapter in the Admin guide which is about Access Control is:
http://docs.sun.com/source/816-6698-10/aci.html
If you have any further questions, please post them and im sure someone will respond.
Thanks
ndrb