Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 352 / 532

Access Control Examples
352 Netscape Enterprise Server Administrator’s Guide
The entry in the
generated.https- serverid .acl
file for this example
looks like this:
acl "path=/usr/netscape/server4/nes/docs/senior-staff/";
deny (all)
user = "anyone";
allow absolute (read,execute,list)
group = "executives";
allow absolute (all)
user = "ceo";
Restricting Access to a URI (Path)
This example uses a URI to control access to a single user’s content on the web
server. URIs are paths and files relative to the server’s document root directory.
Using URIs is an easy way to manage your server’s content if you frequently
rename or move all or part of it (for example, for disk space). It’s also a good
way to handle access control if you have additional document roots.
This example gives anyone read access to files and directories in the path
specified by the URI
/my_directory
. Only one user (“me” in this example)
has full access to the directories and files.
You might use this example if you have several users who publish their content
on your server. The users want to have write access to their content, and they
want anyone to have read/execute access.
To restrict access to a URI, perform the following steps:
1.
In Enterprise Server, choose Server Preferences.
2.
Click the Restrict Access link.
The Access Control List Management page appears.
3.
In the section called “Type in the ACL name,” type the URI you want to
control. For example, type
uri=/my_directory
. Click Edit Access
Control.
The two-frame pages appear.
4.
Click New Line to create the first rule that allows all users read access.