Hierarchy Of Authorization Statements - Netscape ENTREPRISE SERVER 6.1 - 08-2002 ADMINISTRATOR Administrator's Manual

ACL File Syntax
subdirectory
control on the subdirectory won't work because anyone allowed access to the
/my_stuff
directory. To prevent this, create a rule for the subdirectory that first denies access
to anyone and then allows it for the few users who need access.
However, in some cases if you set the default ACL to deny access to everyone, then
your other ACL rules don't need a "deny all" rule.
The following line denies access to everyone:
deny (all)
This section includes the following topics:
•

Hierarchy of Authorization Statements

• Attribute Expressions
• Operators For Expressions
Hierarchy of Authorization Statements
ACLs have a hierarchy that depends on the resource. For example, if the server
receives a request for the document (URI)
/my_stuff/web/presentation.html
for this URI. The server first adds ACLs listed in 'check-acl' statements of its
obj.conf
The server processes this list in the same order. Unless 'absolute' ACL statements
are present, all statements are evaluated in order. If an 'absolute allow' or 'absolute
deny' statement evaluates to 'true', the server stops processing and accepts this
result.
352 Netscape Enterprise Server Administrator's Guide • August 2002
/my_stuff/personal
directory will also be allowed access to the
user = "anyone";
file. Then the server appends matching URI and PATH ACLs.
that allows access to a few users, the access
/my_stuff/personal
, the server builds a list of ACLs that apply