Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 340 / 532

Restricting Access to Your Web Site
340 Netscape Enterprise Server Administrator’s Guide
denied. For example, in Figure 14.4 any user in the database can view a file
(read access), but they must be in the “pubs” group if they want to publish a
file to the server.
Figure 14.4 You can combine Deny and Allow statements in an ACL.
Specifying Users and Groups
You can restrict access to Enterprise Administration Server or your web site
based on the user who requests a resource. With user and group
authentication, users are prompted to enter a username and password before
they can access the resource specified in the access control rule.
The Enterprise Server uses a list of users, who might be sorted into groups, to
determine access rights for the user requesting a resource. You must define an
administrators group (the group you set up for distributed administration) for
access control in Enterprise Administration Server. The list of users (and the
groups they are included in) are stored in an LDAP server, such as Netscape
Directory Server. You should make sure the database contains users and groups
(including the administrators group) before you set access control.
You can allow or deny access to everyone in the database, or you can allow or
deny specific people by using wildcard patterns or lists of users or groups.
This list of ACEs applies to the entire server.
This ACE allows read,
execute, and list
access to all users in
the database who use
a computer in the
netscape.com
domain.
This ACE denies
access to everyone
but continues to
evaluate the next
ACEs to determine a
user’s access
permissions.
This ACE allows anyone in the pubs group full
access (including write and delete permissions)
to the server.