Attribute Expressions - Netscape ENTREPRISE SERVER 6.1 - 04-2002 ADMINISTRATOR Administrator's Manual

If there are more than one ACLs that match, the server uses the last statement that
matches. However, if you use an absolute statement, then the server stops looking
for other matches and uses the ACL containing the absolute statement. If you have
two absolute statements for the same resource, the server uses the first one in the
file and stops looking for other resources that match.
version 3.0;
acl "default";
authenticate (user,group) {
prompt="Enterprise Server";
};
allow (read,execute,list,info)
user = "anyone";
allow (write,delete)
user = "all";
acl "uri=/my_stuff/web/presentation.html";
deny (all)
user = "anyone";
allow (all)
user = "joe";

Attribute Expressions

Attribute expressions define who is allowed or denied access based on their
username, group name, host name, or IP address. The following lines are examples
of allowing access to different people or computers:
• user = "anyone"
• user = "smith*"
• group = "sales"
• dns = "*.example.com"
• dns = "*.example.com,*.netscape.com"
• ip = "198.*"
• ciphers = "rc4"
• ssl = "on"
ACL File Syntax
Appendix C ACL File Syntax 355