Archived
TD0120: FMT_SMF_EXT.1, Functions 2 & 5, Users and/or Administrators Configuration
Publication Date
2016.12.01
Protection Profiles
PP_MD_v2.0, PP_MD_v3.0
Other References
FMT_SMF_EXT.1
Issue Description
Several of the test activities for FMT_SMF_EXT.1.1 state that the tests be performed "as both the user and the administrator." However, some of the functions are restricted (by the table) to be performed only by the administrators, and other functions give the ST author this options as well. In the case that functions are restricted to an administrator (either because it's mandated or because the ST author chose to do so), there is no purpose in having the user attempt to exercise this function (the restriction test is covered by the test assurance activity for FMT_MOF_EXT.1.2). Resolution
The following Assurance Activities for FMT_SMF_EXT.1 should be modified as followed: Justification
There is no reason to test that a user can perform a function that has been restricted to the adminstrator. |