Setting Access Control - Netscape ENTREPRISE SERVER 6.1 - 04-2002 ADMINISTRATOR Administrator's Manual

(ip = "208.12.54.76");
# The following ACL rule denies everyone not in the directory
# server and everyone in the directory server except for
# GroupA and GroupB access to the directory "my_stuff"
acl "path=/export/user/990628.1/docs/my_stuff/";
authenticate (user,group) {
};
deny (all)
(user = "anyone");
allow (read,execute,list,info)
(group = "GroupA,GroupB");
For example, if a user requests the URL:
http://
Enterprise Server would first check access control for the entire server. If the ACL
for the entire server was set to continue, the server would check for an ACL for the
directory
and then moves on to the next directory. This process continues until an ACL is
found that denies access, or until the final ACL for the requested URL (in this case,
the file
To set up access control for this example using the Server Manager, you could
create an ACL for the file only, or for each resource leading to the file. That is, one
for the entire server, one for the
directory, and one for the file.

Setting Access Control

This section describes the process of restricting access to the files or directories on
your web site. You can set global access control rules for all servers, and also
individually for specific servers. For instance, a human resources department
might create ACLs allowing all authenticated users to view their own payroll data,
but restrict access to updating data to only human resource personnel responsible
for payroll.
database = "default";
method = "basic";
server_root
/my_stuff/web/presentation.html
. If an ACL exists, the server checks the ACEs within the ACL,
my_stuff
) is reached.
presentation.html
directory, one for the
my_stuff
Chapter 8
Setting Access Control
my_stuff/web
Controlling Access to Your Server 173