Novell NETWARE 6-DOCUMENTATION Manual page 2021

Hierarchy of Authorization Statements
92
Getting Results with Novell Web Services
ACLs have a hierarchy that depends on the resource. For example, if the
server receives a request for the document (URI) /MY_STUFF/WEB/
PRESENTATION.HTML, the server first looks for an ACL that matches the
file type or any other wildcard pattern that matches the request, then it looks
for one on the directory, and finally it looks for an ACL on the URI. If there is
more than one ACL that matches, the server uses the last statement that
matches.
However, if you use an absolute statement, then the server stops looking for
other matches and uses the ACL containing the absolute statement. If you
have two absolute statements for the same resource, the server uses the first
one in the file and stops looking for other resources that match.
For example, using the ACL hierarchy with the request for the document
/MY_STUFF/WEB/PRESENTATION.HTML, you could have an absolute
ACL that restricts access to the file type *.HTML then the server would use
that ACL instead of looking for one that matches the URI or the path.
version 3.0;
acl "default";
authenticate (user,group) {
prompt="Enterprise Server";
};
allow (write,delete)
user="all";
acl "*.html";
deny absolute (all)
user="anyone";
acl "uri=/my_stuff/web presentation.html";
deny (all)
allow (all)
user="anyone";
user="anyone";