Netscape NETSCAPE DIRECTORY SERVER 6.1 - ADMINISTRATOR, Руководство администратора

Страница: 232 / 578

Creating ACIs From the Console
232 Netscape Directory Server Administrator’s Guide • August 2002
Creating a New ACI
To create a new ACI:
1.
Display the Access Control Editor.
This task is explained in “Displaying the Access Control Editor,” on page 230.
If the view displayed is different from Figure 6-3 on page 231, click the Edit
Visually button.
2.
Name the ACI, by typing a name in the ACI Name text box.
The name can be any string you want to use to uniquely identify the ACI. If
you do not enter a name, the server uses
unnamed ACI
.
3.
In the Users/Groups tab, select the users to whom you are granting access by
highlighting All Users, or clicking the Add button to search the directory for
the users to add.
In the Add Users and Groups window:
a.
Select a search area from the drop-down list, enter a search string in the
Search field, and click the Search button.
The search results are displayed in the list below.
b.
Highlight the entries you want in the search result list, and click the Add
button to add them to the list of entries which have access permission.
c.
Click OK to dismiss the Add Users and Groups window.
The entries you selected are now listed on the Users/Groups tab in the ACI
editor.
4.
In the Access Control Editor, click the Rights tab, and use the checkboxes to
select the rights to grant.
5.
Click the Targets tab, then click This Entry to display the node targeted by the
ACI.
You can change the value of the target DN, but the new DN must be a direct or
indirect child of the selected entry.
If you do not want every entry in the subtree under this node to be targeted by
the ACI, you must enter a filter in the Filter for Sub-entries field.
Additionally, you can restrict the scope of the ACI to only certain attributes by
selecting the attributes you want to target in the attribute list.