Specifying Users And Groups - Sun Microsystems Netscape Enterprise Server Administrator's Manual

Restricting Access to Your Web Site
denied. For example, in Figure 14.4 any user in the database can view a file
(read access), but they must be in the "pubs" group if they want to publish a
file to the server.
Figure 14.4 You can combine Deny and Allow statements in an ACL.
This ACE allows read,
execute, and list
access to all users in
the database who use
a computer in the
netscape.com
domain.

Specifying Users and Groups

You can restrict access to Enterprise Administration Server or your web site
based on the user who requests a resource. With user and group
authentication, users are prompted to enter a username and password before
they can access the resource specified in the access control rule.
The Enterprise Server uses a list of users, who might be sorted into groups, to
determine access rights for the user requesting a resource. You must define an
administrators group (the group you set up for distributed administration) for
access control in Enterprise Administration Server. The list of users (and the
groups they are included in) are stored in an LDAP server, such as Netscape
Directory Server. You should make sure the database contains users and groups
(including the administrators group) before you set access control.
You can allow or deny access to everyone in the database, or you can allow or
deny specific people by using wildcard patterns or lists of users or groups.
340 Netscape Enterprise Server Administrator's Guide
This list of ACEs applies to the entire server.
This ACE allows anyone in the pubs group full
access (including write and delete permissions)
to the server.
This ACE denies
access to everyone
but continues to
evaluate the next
ACEs to determine a
user's access
permissions.