Netscape Certificate Management System 6.2, Руководство администратора

Страница: 349 / 874

Authorization for CMS Users
Chapter 8 Authorization 349
To edit the existing ACLs:
1.
Log in to the CMS console (see “Logging Into the CMS Console” on page 245).
2.
In the navigation tree, select Access Control List.
The Access Control List tab appears in the right pane.
3.
Select the ACL and then click Edit. See “ACL Reference,” on page 350 for
detailed information about each ACL.
That ACL will open in the Access Control Editor window. This window
contains two fields:
ACI Entries. This field contains the ACIs for this ACL. You can select each ACI
individually, and then edit or delete it. You can also add acis.
Description. A description of this ACL. You can change the text in this field.
4.
To delete an ACI, select it in the ACI Entries list and click Delete.
5.
To add an ACI, click Add in the ACI Entries field. The ACI Editor opens. To
create the ACI:
a.
Select Allow or Deny from the Access field to allow or deny the operation
specified in this ACI to the group(s), user(s) or IP address(es) specified. For
more information about allowing or denying access, see “Allow and
Deny,” on page 346.
b.
Select one operator from the possible operators in the Operators list. You
can select more than one operator for this ACI by holding down Ctrl and
selecting all operators that will be included in the ACI.
c.
Specify the user, group, or IP address that will be granted or denied access
to the selected operators by providing the correct syntax in the Syntax
field. See “Syntax,” on page 347 for details on syntax.
d.
Click OK.
6.
To modify an ACI, select the ACI and click edit. The ACI Editor opens. To edit
the ACI:
a.
Select Allow or Deny from the Access field to allow or deny the operation
specified in this ACI to the group(s), user(s) or IP address(es) specified. For
more information about allowing or denying access, see “Allow and
Deny,” on page 346.
b.
Select one operator from the possible operators in the Operators list. You
can select more than one operator for this ACI by holding down Ctrl and
selecting all operators that will be included in the ACI.