Creating A New Aci - Netscape DIRECTORY SERVER 6.2 - ADMINISTRATOR Administrator's Manual

Creating ACIs From the Console

Creating a New ACI

To create a new ACI:
Display the Access Control Editor.
1.
This task is explained in "Displaying the Access Control Editor," on page 232.
If the view displayed is different from Figure 6-3 on page 233, click the Edit
Visually button.
Name the ACI, by typing a name in the ACI Name text box.
2.
The name can be any string you want to use to uniquely identify the ACI. If
you do not enter a name, the server uses
In the Users/Groups tab, select the users to whom you are granting access by
3.
highlighting All Users, or clicking the Add button to search the directory for
the users to add.
In the Add Users and Groups window:
a.
b.
c.
In the Access Control Editor, click the Rights tab, and use the checkboxes to
4.
select the rights to grant.
Click the Targets tab, then click This Entry to display the node targeted by the
5.
ACI.
You can change the value of the target DN, but the new DN must be a direct or
indirect child of the selected entry.
If you do not want every entry in the subtree under this node to be targeted by
the ACI, you must enter a filter in the Filter for Sub-entries field.
Additionally, you can restrict the scope of the ACI to only certain attributes by
selecting the attributes you want to target in the attribute list.
234 Netscape Directory Server Administrator's Guide • December 2003
Select a search area from the drop-down list, enter a search string in the
Search field, and click the Search button.
The search results are displayed in the list below.
Highlight the entries you want in the search result list, and click the Add
button to add them to the list of entries which have access permission.
Click OK to dismiss the Add Users and Groups window.
The entries you selected are now listed on the Users/Groups tab in the ACI
editor.
.
unnamed ACI