Sun Microsystems Netscape Enterprise Server, Administrator'S Manual

Page: 344 / 532

Restricting Access to Your Web Site
344 Netscape Enterprise Server Administrator’s Guide
• Delete access means a user who also has write privileges can delete a file
or directory.
• List access means the user can get directory information. That is, they can
get a list of the files in that directory. This applies to Web Publisher and to
directories that don’t contain an
index.html
file.
• Info access means the user can get headers (
http_head
method). This is
mainly used by the Web Publisher.
Access to Programs
You can select areas of the administration server that administrators can access.
You can choose groups of tabs that appear in the Server Manager (such as
Cluster Management), or you can choose specific pages that appear as links in
the left frame of the Server Manager (such as “New User” in the User & Groups
tab).
To control access to a program in a server,
1.
Go to the Universal Enterprise Settings for the administration server. Choose
Restrict Access from Global Settings tab.
2.
From the drop-down list, choose the server whose administration access
you want to restrict. The administration server is labeled
“
https-admserv
.” Other servers are labeled with their type and their
server id (for example,
https-mozilla
).
When you select a server to restrict, you are restricting who can view the
Server Manager pages and which pages they can use to configure that
server. For example, you might allow some administrators to configure the
Users & Groups section of the administration server and not allow them
access to the Global Settings. After you choose a server, click Edit ACL. The
two-frame access control pages appear.
3.
Each ACL begins with two deny lines (the default setting), one that restricts
access to only those users in the “administrators” group set for distributed
administration, and another that restricts access to all users. If you want to
change either of these lines, you need to manually edit the ACL file.