Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 343 / 532

Chapter 14, Controlling Access to Your Server 343
Restricting Access to Your Web Site
Restricting by hostname is more flexible than by IP address—if a user’s IP
address changes, you won’t have to update this list. Restricting by IP address,
however, is more reliable—if a DNS lookup fails for a connected client,
hostname restriction cannot be used.
The hostname and IP addresses should be specified with a wildcard pattern or
a comma-separated list. The wildcard notations you can use are specialized;
you can only use the
*
. Also, for the IP address, the
*
must replace an entire
byte in the address. That is,
198.95.251.*
is acceptable, but
198.95.251.3*
is not. When the
*
appears in an IP address, it must be the
right-most character. For example,
198.*
is acceptable, but
198.*.251.30
is
not.
For hostnames, the
*
must also replace an entire component of the name. That
is,
*.netscape.com
is acceptable, but
*sers.netscape.com
is not. When
the
*
appears in a hostname, it must be the left-most character. For example,
*.netscape.com
is acceptable, but
users.*.com
is not.
Setting Access Rights
You can set access rights to files and directories on your web site. That is, in
addition to allowing or denying all access rights, you can specify a rule that
allows or denies partial access rights. For example, you can give people read-
only access rights to your files, so they can view the information but not change
the files. This is particularly useful when you use the web publishing feature to
publish documents.
When you create an access control rule, the default access rights are set to all
access rights. To change access rights, click the Rights link in the top frame, and
then choose the access rights you want to set for a particular rule. The
following list describes each access right you can check.
• Read access lets a user view a file. This access right includes the HTTP
methods GET, HEAD, POST, and INDEX.
• Write access lets a user change or delete a file. Write access right includes
the HTTP methods PUT, DELETE, MKDIR, RMDIR, and MOVE. To delete a
file, a user must have both write and delete privileges.
• Execute access applies to server-side applications, such as CGI programs,
Java applets, and agents.