Hi,

Sorry, in my last message I assumed you were using a backup of these files
and they were already correct. This configuration is non-trivial due to the
requirement of having 'other' groups accessible by everyone else, along with
the overlap in groups readable by user groups determined by the last part of
their name.

Access.conf should look something like the following -

*:logoff:::*
*:read,post:$lookup$:$lookup$:*,!delta.*,!comp.*
*:read,post:groups=up::*.up:add
*:read,post:groups=down::*.down:add
*:read,post:groups=deltacomp::delta.*,comp.*

Note the use of 'add' rules. These take away access from users not matching
the groups.

So in the above example, we give access to ALL authenticated users to
*,!delta.*,!comp.* (The reason for excluding the delta.* and comp.* groups
now is due to the overlap in access making it difficult to take this away
later).

We then take away access to the *.up groups from anyone not in group 'up',
while giving these users access to all *.up groups (including delta.up and
comp.up).

The 'down' line then does the same for the *.down groups.

Finally, we give delta.* and comp.* access to deltacomp. We can't use an add
rule here as it would take away access to the comp/delta.up/down groups from
those in the up/down user groups.

Despite only being a few lines long, this access.conf configuration attempts
to do a lot. Please ensure you test this thoroughly before deploying it on
your server.

- Roydon L.


<[EMAIL PROTECTED]> wrote in message
news:<3e1775cf$1@netwin1>...
>
> Heres what I want to do, using hypothetical groups for our purposes here.
I have a total of 16 newsgroups, each with one of four prefixes (alt. bin.
comp. delta.)
> and four suffixes (.up .down .left .right)
>
> I want to create 3 usergroups:
> GROUP UP        (alt.up, bin.up, comp.up, delta.up)
> GROUP DOWN      (alt.down, bin.down, comp.down, delta.down)
> GROUP DELTACOMP (delta.*, comp.*)
>
> NOTE:
> comp.up & delta.up accessed by GROUPS: UP & DELTACOMP
> comp.down & delta.down accessed by GROUPS: DOWN & DELTACOMP
>
>
> Additionally, for users who do not supply a user name or password, would
need them to be able to access the news groups not exclusive to those
mentioned above. (alt.left, alt.right, bin.left, bin.right)
>
> Can anyone assist with how this would be set up in the access.conf file?
>
> R.Frisby
>



Reply via email to