Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 371 / 532

Chapter 15, Configuring Web Publishing 371
Setting Access Control For Web Publisher Owners
Setting Access Control For Web Publisher
Owners
The access control system supports a special user called owner . When an ACL
rule designates the user to be the owner, the permissions defined by this rule
apply to the owner assigned by Web Publisher for each document. For
example:
allow (write, delete) user = owner;
Note
Do not create a user with the username of
owner
.
Ownership of web publishing documents can be assigned either through the
Index and Update Properties page (choose Web Publishing and click the Index
and Update Properties link) or through Web Publisher. The Index and Update
Properties page allows you to do a bulk assignment of ownership to a set of
documents and Web Publisher performs individual assignments of file
ownership to a user when the user publishes or uploads the file.
Only the owner can modify the access control (ACL) rules for a file. These rules
define the actions users can perform on the file, such as moving, copying,
renaming, or deleting it. An owner can reassign ownership of a file to another
user, and if a file has no owner, anyone with a valid username can identify
themselves as its owner. Because the username identified as the owner of a file
can change, any access control that you place on a file should target the owner
of a file rather than a specific username.
Note
If you change the owner of the Netshare directory and all subsequent
subdirectories, then only owner can write to these directories. If you change
the Netshare root owner, but not the owner of the subdirectories, then the
owners of the subdirectories can still write within the directories. It is important
to note that if you change the name of a file (with this specific ACL settings),
then the user needs to be the owner of both the enclosing directory, and the
file itself.
If the default access control (ACL) that governs your server is not restrictive or
flexible enough for your web publishing needs, you can use the Restrict Access
function (choose Server Preferences and click the Restrict Access link) to create
an ACL that is more appropriate for web publishing.
For example, you could create an ACL like this: