Notes for SPD Server Administrators

The SPD Server administrator requires a UNIX login ID on the machine where SPD Server will be installed and administered. Other SPD Server users do not need UNIX login IDs. Other users’ access to SPD Server data resources is controlled via SPD Server user IDs via the SPD Server password facility.

Administrate your SPD Server environment by using the same UNIX user ID that was used to install SPD Server on the host machine. The user ID should also be the SPD Server administrator's user ID. The common user ID minimizes potential problems with file ownership and system access permissions on the server machine. You add SPD Server access controls to the resources that were created with SPD Server by using SPD Server user IDs and SPD Server ACLs. The SPD Server user IDs and ACLs provide fine-grained access controls for SPD Server data resources.

Regardless of how the SPD Server run-time environment is configured, SPD Server processes always run using the UNIX user ID that started the SPD Server session. That UNIX user ID owns all of the files that the SPD Server process creates. The UNIX user ID is governed by UNIX file access permissions. Remember this when you start SPD Server processes and run SPD Server administrator utilities. Otherwise, it is possible to create files that have ownership and permissions that deny access to required SPD Server processes. If you perform all SPD Server installation and administration tasks from the same UNIX user ID, subsequent use of SPD Server is much easier.

The SPD Server administrator needs to be familiar with the SPD Server psmgr utility. The SPD Server system uses its own layer of access controls that overlay UNIX access permissions. SPD Server processes run in the context of a UNIX user ID, and that user owns all of the resulting SPD Server file resources that are created.

Each SPD User is given their own SPD Server user ID and password. The user ID and password are needed to complete the LIBNAME connection to SPD Server. All resources that a user creates are owned by the user. An SPD Server user can access only resources that that user created, or resources that another SPD Server user grants them access to via SPD ACLs. There also exists an "anonymous" user account that any SPD Server user can access with no password, and where all resources that are created by the anonymous user are accessible to any other SPD Server user.