On Tue, 2001-10-02 at 20:19, Camilo Rostoker wrote:
> Hi....
> I'm stuck trying to figure out the ACL format...I know, I know ... it
> looks easy ..but ....
> 
> <group> <permissions> <user>
> 
> are these the same groups and users from /etc/passwd , 
No, 
> or the same as the .htaccess file, or what?
The users are the same as the htpasswd users.

Think of cisco acl's. Each access control list
has a name. The above "group" is just a name

The next section <permissions> are one letter
features you wish to allow to the "group".
For example

group1 M would allow anyone in group "group1"
to have the "M" feature. The "M" feature is
listed, in the sample .acl file is
# Access permissions:
# M Modify user information

Modify user. Which means anyone in the group
named "group1" is allowed to modify a users
information.

The last part of the acl line is <user user user>
A list of users who should belong to the group.
For example:

tech VI joe bob sally

This means anyone who logs in as either
joe, bob or sally is in the group named "tech".
This group has the ability to only:
# V View user information
# I View domain information

view user information and view domain information.
Or in other words.. they can't delete things
by mistake.

If you set the <permission> to "*" then 
they can do anything, for example:

senior * admin1 admin1

This grants users (in htpasswd) admin1 and admin2 the
ability to do anything. And they are in the group
named "senior".

Hope that helps.

One gotcha is, don't have any white space at the end of the
<group> <permission> <user user user> lines

Ken Jones
inter7.com

> 
> any help will be greatly appreciate.
> 
> cheers,
> camilo rostoker
> 
> --
> +====================================================+
> 
> Camilo Rostoker
> Web Developer
> Scottsdale I.T. Consulting
> 
> [EMAIL PROTECTED]
> http://www.scottsdale.ca/
> 
> +====================================================+
> 
> 
> 


Reply via email to