Novell NETWARE 6-DOCUMENTATION Manual page 2022

Attribute Qualifier Expressions
Attribute qualifier expressions define who is allowed or denied access based
on their username, group name, hostname, or IP address. The following lines
are examples of allowing access to different people or computers:
user = "anyone"
user = "smith*"
group = "sales"
dns = "*.organization.com"
dns = "*.organization.com" or "*.accounting_mail.com"
ip = "198.*"
You can also restrict access to your server by time of day (based on the local
time on the server) by using the timeofday attribute qualifier. For example, you
can use the timeofday attribute qualifier to restrict access to certain users
during specific hours.
Use a 24-hour clock to specify times (for example, use 0400 to specify 4 a.m.
or 2230 for 10:30 p.m.).
The following example restricts access to a group of users called Guests
between 8:00 a.m. and 4:59 p.m.
allow (read)
(group="guests") and
(timeofday<800 or timeofday>=1700);
You can also restrict access by day of the week. Use the following three-letter
abbreviations to specify days of the week: Sun, Mon, Tue, Wed Thu, Fri, and
Sat.
The following statement allows access for users in the Premium group any day
and any time. Users in the Discount group get access all day on weekends and
on weekdays anytime except 8:00 a.m. to 4:59 p.m.
allow (read) (group="discount" and dayofweek="Sat,Sun") or
(group="discount" and (dayofweek="mon,tue,wed,thu,fri" and
(timeofday<0800 or timeofday>=1700)))
or
(group="premium");
Understanding ACL Files
93