Deleting An Aci; Access Control Usage Examples - Netscape DIRECTORY SERVER 6.1 - ADMINISTRATOR Administrator's Manual

Access Control Usage Examples

Deleting an ACI

To delete an ACI:
On the Directory tab, right-click the top entry in the subtree, and choose Set
1.
Access Permissions from the pop-up menu.
The Access Control Manager window is displayed. It contains the list of ACIs
belonging to the entry.
In the Access Control Manager window, select the ACI that you want to delete.
2.
Click Remove.
3.
The ACI is no longer listed in the Access Control Manager.
Access Control Usage Examples
The examples provided in this section illustrate how an imaginary ISP company,
example.com
how to perform a given task from the Console and using an LDIF file.
example.com
example.com
example.com
medium-sized companies, HostedCompany1, and HostedCompany2. It also
provides internet access to a number of individual subscribers.
These are the access control rules that
• Grant anonymous access for read, search, and compare to the entire
example.com
Access," on page 235).
• Grant write access to
such as
Personal Entries," on page 237).
• Grant
certain critical roles (see "Restricting Access to Key Roles," on page 241).
• Grant the
the People branch (see "Granting a Group Full Access to a Suffix," on
page 242).
234 Netscape Directory Server Administrator's Guide • August 2002
, would implement its access control policy. All the examples explain
's business is to offer a web hosting service and internet access. Part of
's web hosting service is to host the directories of client companies.
actually hosts and partially manages the directories of two
tree for
example.com
example.com
homeTelephoneNumber
employees the right to add any role to their entry, except
example.com
Human Resources group all rights on the entries in
example.com
wants to put in place:
example.com
employees (see "Granting Anonymous
employees for personal information for
, (see "Granting Write Access to
homeAddress