Novell ACCESS MANAGER 3.1 SP2 - ACCESS GATEWAY GUIDE 2010 Manual page 27

The default path is /*, which indicates everything on the Web server. Modify this if you need to
restrict access to a specific directory on your Web server. If you have multiple directories on
your Web server that require the same authentication contract and access control, add each
directory as a URL path.
New: To add a path, click New, specify the path, then click OK. For example, to allow access to
all the pages in the public directory on the Web server, specify the following path:
/public/*
To allow access to all the files in a directory, but not to the subdirectories and their files, specify
the following:
/?
/public/?
The allows access to the root directory, but not the subdirectories. The
/?
access to the files in the public directory, but not the subdirectories.
To allow access to files of a specific type, specify the following:
/public/*.pdf
This allows access to all the files in the public directory that have a PDF extension. Access to
other file types and subdirectories is denied.
To use this protected resource to protect a single page, specify the path and the filename. For
example, to protect the
/login/login.html
This is the type of URL path you want to specify when you create a Form Fill policy for a
protected resource. The URL Path List normally contains only this one entry. If you have
multiple pages that the Form Fill policy applies to, list each one separately in the list. For
optimum speed, you want the Access Gateway to be able to quickly identify the page and not
search other pages to see if the policy applies to them.
For more information on how a user's request is matched to a protected resource, see
"Understanding URL Path Matching" on page
For more information on using a query string, see
page 28.
Modify: To modify a path, click the path link, then modify the URL Path.
Delete: To delete a path, select the path, then click Delete.
7 Click OK.
8 In the Protected Resource List, ensure that the protected resource you created is enabled.
9 (Optional) To add policies for protecting this resource, continue with one of the following:
"Assigning an Authorization Policy to a Protected Resource" on page 31
"Assigning an Identity Injection Policy to a Protected Resource" on page 32
"Assigning a Form Fill Policy to a Protected Resource" on page 33
"Assigning a Policy to Multiple Protected Resources" on page 37
10 To apply your changes, click the Access Gateways link, then click Update > OK.
Understanding URL Path Matching
The URL path determines which protected resource is used for a user request. Suppose you create
one protected resource with the following URL paths:
page in the
login.html
27.
Configuring the Access Gateway to Protect Web Resources
directory, specify the following:
/login
"Using a Query String in the URL Path" on
allows
/public/?
27