Netscape NETSCAPE CONSOLE 6.0 - MANAGING SERVERS, Руководство пользователя

Страница: 171 / 302

Working With Access Control Instructions
Chapter 9 Access Control 171
Working With Access Control Instructions
When you create Access Control Instructions (ACIs) you specify which users can
manage a resource as well as when and how access is granted. Netscape Console
uses two tools to simplify the process of creating and assigning ACIs: ACI Manager
and ACI Editor.
The ACI Manager lets you apply ACIs to an object. It is also the dialog box from
which you typically launch the ACI Editor.
The ACI Editor lets you create and modify ACIs using a visual interface or a
manual editor. Depending upon your needs, you can edit visually, manually, or
using both methods.
Whenever you want to work with an object’s ACIs, you must use the ACI
Manager. If you want to create an ACI for an object, you must also use the ACI
Editor.
Each Netscape server may have its own uses for the ACI Editor and may have
unique ACI extensions. For detailed information about a particular server’s ACI
options, see the documentation for that server.
What’s in an ACI
Any directory entry can include one or more ACIs. Since Netscape servers store
configuration settings, task entries, and other data as directory entries, you can
apply ACIs to this information. These ACIs consist of three sections: a target,
permissions, and bind rules.
Target
A target is an object, attribute, or group of objects and attributes to which you’re
controlling access.
Permissions
Permissions specify the rights that you are granting or denying.
Read
,
write
, and
execute
are examples of permissions that are typically specified in ACIs.