Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 351 / 532

Chapter 14, Controlling Access to Your Server 351
Access Control Examples
Don’t edit the default values for the first rule—they deny all access to the
directory. You’ll edit the second rule to allow read access to the
“executives” group.
6.
Click Deny in the second rule. In the bottom frame that appears, check
Allow, and then click Update.
7.
Click “anyone” in the second rule. In the bottom frame, type the group you
want to have access to the server. For this example, type
executives
in
the Group field. Click Update.
8.
Click “all” in the top frame. Uncheck the Write and Delete access rights.
This means the users in the executives group can’t add or remove files, but
they can view them and run any applications in the directories. Click
Update.
9.
Click New Line to create a rule for the “ceo” user. Check Allow for the third
rule.
10.
Click “anyone”. In the bottom frame, type
ceo
in the User field. Click
Update.
11.
Uncheck Continue for both the second and the third rules.
This means that the server ignores any ACLs for directories or files under
the directory you specified in Step 3. The frame should look like the one in
Figure 14.6.
Figure 14.6 Restricting access to a path in the server
12.
Click Submit and save and apply your changes.