The application server must employ automated mechanisms enabling authorized users to make information sharing decisions based on access authorizations of sharing partners and access restrictions on information to be shared.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35482	SRG-APP-000032-AS-NA	SV-46769r1_rule		Medium

Description
User-based collaboration and information sharing applications present challenges regarding classification and dissemination of information generated and shared among the application users. These types of applications are intended to share information created and stored within the application; however, not all users have a need to view all data created or stored within the collaboration tool. This control primarily applies to the discretionary sharing of information resources by data owners. This type of service is unrelated to AS functionality as the AS is a Role Based Access Control (RBAC) model.

Description

User-based collaboration and information sharing applications present challenges regarding classification and dissemination of information generated and shared among the application users. These types of applications are intended to share information created and stored within the application; however, not all users have a need to view all data created or stored within the collaboration tool. This control primarily applies to the discretionary sharing of information resources by data owners. This type of service is unrelated to AS functionality as the AS is a Role Based Access Control (RBAC) model.

STIG	Date
Application Server Security Requirements Guide	2013-01-08

Details

Check Text ( C-43835r1_chk )
This requirement is NA for the AS SRG.

Fix Text (F-40023r1_fix)
This requirement is NA. No fix is required.