Netscape DIRECTORY SERVER 6.02 - ADMINISTRATOR Administrator's Manual page 230

Access Control Usage Examples
example.com
example.com
example.com
medium-sized companies, HostedCompany1, and HostedCompany2. It also
provides internet access to a number of individual subscribers.
These are the access control rules that
• Grant anonymous access for read, search, and compare to the entire
example.com
Access," on page 231).
• Grant write access to
such as
Personal Entries," on page 233).
• Grant
certain critical roles (see "Restricting Access to Key Roles," on page 236).
• Grant the
the People branch (see "Granting a Group Full Access to a Suffix," on
page 238).
• Grant all
Social Committee branch of the directory, and to delete group entries that they
own (see "Granting Rights to Add and Delete Group Entries," on page 239).
• Grant all
under the Social Committee branch of the directory (see "Allowing Users to
Add or Remove Themselves From a Group," on page 246).
• Grant access to the directory administrator (role) of HostedCompany1 and
HostedCompany2 on their respective branches of the directory tree, with
certain conditions such as SSL authentication, time and date restrictions, and
specified location (see "Granting Conditional Access to a Group or Role," on
page 241).
• Grant individual subscribers access to their own entries (see "Granting Write
Access to Personal Entries," on page 233).
• Deny individual subscribers access to the billing information in their own
entries (see "Denying Access," on page 243).
• Grant anonymous access to the world to the individual subscribers subtree,
except for subscribers who have specifically requested to be unlisted. (This part
of the directory could be a slave server outside of the firewall and updated
once a day.) See "Granting Anonymous Access," on page 231 and "Setting a
Target Using Filtering," on page 246.
230 Netscape Directory Server Administrator's Guide • May 2002
's business is to offer a web hosting service and internet access. Part of
's web hosting service is to host the directories of client companies.
actually hosts and partially manages the directories of two
tree for
example.com
example.com
homeTelephoneNumber
employees the right to add any role to their entry, except
example.com
Human Resources group all rights on the entries in
example.com
employees the right to create group entries under the
example.com
employees the right to add themselves to group entries
example.com
wants to put in place:
example.com
employees (see "Granting Anonymous
employees for personal information for
, (see "Granting Write Access to
homeAddress