Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 459 / 532

Appendix B, ACL File Syntax 459
ACL File Syntax
For example, using the ACL hierarchy with the request for the document
/my_stuff/web/presentation.html
, you could have an absolute ACL
that restricts access to the file type
*.html
. Then the server would use that
ACL instead of looking for one that matches the URI or the path.
version 3.0;
acl "default";
authenticate (user,group) {
prompt="Enterprise Server";
};
allow (read,execute,list,info)
user = "anyone";
allow (write,delete)
user = "all";
acl "*.html";
deny absolute (all)
user = "anyone";
acl "uri=/my_stuff/web/presentation.html";
deny (all)
user = "anyone";
allow (all)
user = "anyone";
Attribute Expressions
Attribute expressions define who is allowed or denied access based on their
username, group name, host name, or IP address. The following lines are
examples of allowing access to different people or computers:
• user = “anyone”
• user = “smith*”
• group = “sales”
• dns = “*.netscape.com”
• dns = “*.netscape.com,*.mozilla.com”
• ip = “198.*”
You can also restrict access to your server by time of day (based on the local
time on the server) by using the
timeofday
attribute. For example, you can
use the
timeofday
attribute to restrict access to certain users during specific
hours.
Note
Use 24-hour time to specify times (for example, use 0400 to specify 4 a.m. or
2230 for 10:30 p.m.).
The following example restricts access to a group of users called guests
between 8 a.m. and 4:59 pm.