On Mon, 19 Nov 2001, Steven Enderle wrote:

> I was wondering if following scenario is possible with oops (or squid?):
> 
> We have to networks/auth groups which should have different *rights* in 
> accessing the www:
> 
> One group should be able to have full access to the www, in other words, 
> surf it, download stuff etc.
> 
> Another group should be limited to only "surf it", e.g. load text (html, 
> txt...) and images, maybe that flash stuff also, but they should not be 
> able to download stuff.
> 
> This way, i think, it should be possible to have minimum security again 
> those little "i_just_downloaded_it_and_double_clicked"-accidents which, 
> i was told, sometimes happen ...
> 
> I saw that there is a mime acl thingy in the oops sample config file, 
> but i didn't figure out how it should work correctly. But catching that 

It (this acl) works for already received documents, which are already in
cache. But actually it (and any other acls, which are based on document
headers) can be checked at the time when haders are here.
So this is possible, but requre code modification. I have such plan to add
general support for acls which are look into any request or answer header.

> mime types should be the correct way i think (right?) (we had squid with 
> file extension acl working here before, which was far from perfect).
> 
> Any suggestions?
> 
> Thanks
> 
> Steven Enderle
> -- 
> --------------------------------------------------
> ----- Steven Enderle ----- m d n Huebner GmbH ----
> ----- [EMAIL PROTECTED] ----- + 49 911 93 90 90 -----
> -----  Digital Imaging & Documentmanagment   -----
> --------------------------------------------------
> 
> =====================================================================
> If you would like to unsubscribe from this list send message to
> [EMAIL PROTECTED] with "unsubscribe oops-eng" in message body.
> Archive is accessible on http://lists.paco.net/oops-eng/
> 

Igor Khasilev                     |
PACO Links, igor at paco dot net  |

=====================================================================
If you would like to unsubscribe from this list send message to
[EMAIL PROTECTED] with "unsubscribe oops-eng" in message body.
Archive is accessible on http://lists.paco.net/oops-eng/

Дати відповідь електронним листом