Netscape DIRECTORY SERVER 6.02 - ADMINISTRATOR Administrator's Manual page 232

Access Control Usage Examples
Click OK in the Access Control Editor window.
7.
The new ACI is added to the ones listed in the Access Control Manager
window.
ACI "Anonymous World"
In LDIF, to grant read and search access of the individual subscribers subtree to the
world, while denying access to information on unlisted subscribers, you could
write the following statement:
aci: (targetfilter= "(!(unlistedSubscriber=yes))")
(targetattr="homePostalAddress || homePhone || mail") (version 3.0;
acl "Anonymous World"; allow (read, search) userdn=
"ldap:///anyone";)
This example assumes that the ACI is added to the
ou=subscribers,dc=example,dc=com
entry has an
definition filters out the unlisted subscribers based on the value of this attribute.
For details on the filter definition, refer to "Setting a Target Using Filtering," on
page 246.
From the Console, you can set this permission by doing the following:
On the Directory tab, right click the Subscribers entry under the
1.
node in the left navigation tree, and choose Set Access Permissions from the
pop-up menu to display the Access Control Manager.
Click New to display the Access Control Editor.
2.
On the Users/Groups tab, in the ACI name field, type "Anonymous World".
3.
Check that All Users is displayed in the list of users granted access permission.
On the Rights tab, tick the checkboxes for read, and search rights. Make sure
4.
the other checkboxes are clear.
On the Targets tab, click This Entry to display the
5.
dc=example,dc=com
a.
232 Netscape Directory Server Administrator's Guide • May 2002
unlistedSubscriber
suffix in the target directory entry field.
In the filter for subentries field, type the following filter:
(!(unlistedSubscriber=yes))
entry. It also assumes that every subscriber
attribute which is set to yes or no. The target
dc=subscribers,
example.com