/[docman2]/doc/trustee.html
This is repository of my old source code which isn't updated any more. Go to git.rot13.org for current projects!
ViewVC logotype

Diff of /doc/trustee.html

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 1.3 by dpavlin, Sun Jul 28 11:48:30 2002 UTC revision 1.6 by dpavlin, Mon Jul 29 10:29:05 2002 UTC
# Line 14  concept of trustees for Linux kernel by Line 14  concept of trustees for Linux kernel by
14  <p>Comments are written using hash (#) as first character in line  <p>Comments are written using hash (#) as first character in line
15  <br><tt># this is a comment</tt></p>  <br><tt># this is a comment</tt></p>
16    
17  <p>Group can be used instead of username in all ACLs. You can't have user  <p>Group can be used instead of user-name in all ACL. You can't have user
18  which has same name as group or vice-versa. It's written using plus (+) as  which has same name as group or vice-versa. It's written using plus (+) as
19  first character in line.  first character in line.
20  <br>+<i>group</i>:<i>user</i>[,<i>user</i>...]</p>  <br>+<i>group</i>:<i>user</i>[,<i>user</i>...]</p>
# Line 27  Valid modifiers: Line 27  Valid modifiers:
27  <li><tt>!</tt> trustee applies to all except user or group  <li><tt>!</tt> trustee applies to all except user or group
28  <li><tt>C</tt> clear the permission (default is to set)  <li><tt>C</tt> clear the permission (default is to set)
29  <li><tt>D</tt> deny access (default is grant)  <li><tt>D</tt> deny access (default is grant)
30    <li><tt>O</tt> one-level trustee only <small>(this means that those permissions
31            will not be inherited on directories and files downwards from current
32            level -- it's useful for <a href="#anonymous">anonymous access</a>)
33            </small>
34  </ul>  </ul>
35    
36  Valid permissions:  Valid permissions:
# Line 40  Valid permissions: Line 44  Valid permissions:
44  <h2>Examples</h2>  <h2>Examples</h2>
45    
46  <pre>  <pre>
47  # dpavlin is admin (grant all access to members of root group)  # dpavlin is administrator (grant all access to members of root group)
48  +root:dpavlin  +root:dpavlin
49  /:root:RWB  /:root:RWB
50  # give read-only access to all users  # give read-only access to all users
# Line 70  Which will work. Line 74  Which will work.
74    
75  <big>FIX</big> write more examples, better descriptions...  <big>FIX</big> write more examples, better descriptions...
76    
77    <a name="anonymous">
78    <h3>Anonymous access</h3>
79    
80    <p>One of great advantages of using trustees is that you can allow
81    anonymous access (without login). You should pay attention to access
82    right, because you probably don't want anonymous users to see all files
83    or folders in your repository.
84    </p>
85    
86    <p>First, you will have to add browse trustee to anonymous user
87    on root directory -- docman will ignore all anonymous users if
88    you don't do this.
89    <pre>
90            /:anonymous:BO
91    </pre>
92    You really <b>want to use flags <tt>BO</tt></b> and not just <tt>B</tt> because
93    if you specify just <tt>B</tt> anonymous users will be able to browse (see
94    directory names) of your whole repository. This way you can explicitly
95    allow (or deny) which sub-directories you want anonymous users to browse.
96    <br>For example, this will allow anonymous users to see and read everything
97    in <tt>/pub</tt> and to store documents in <tt>/incoming</tt>:
98    <pre>
99            /pub:anonymous:RB
100            /incoming:anonymous:RWB
101    </pre>
102    You might also want to hide some directory from anonymous users, and you
103    can do that using:
104    <pre>
105            /private:anonymous:DB
106    </pre>
107    If you would like to <b>give all your users</b> which are authetificated via
108    login and password <b>all access</b> to all files (like in old docman v1.x) you
109    also have to add
110    <pre>
111            /:*:RWB
112    </pre>
113    However, that <b>will not add all
114    permission to anonymous users</b>. If you want to add all that permission
115    to anonymous users (which will create wiki-like comunity for sharing files)
116    you must explicitly say that you allow that to anonymous users:
117    <pre>
118            /:anonymous:RWB
119    </pre>
120    All those setting will create enviroment which is very like docman v1.x,
121    but with anonymous users allowed to see document in <tt>/pub</tt> and
122    upload them in <tt>/incoming</tt>.
123    </p>
124    
125  <h2>Default security</h2>  <h2>Default security</h2>
126    
127  <p>If none of trustee rules satisfy, default policy is <i>deny</i>. Basically,  <p>If none of trustee rules satisfy, default policy is <i>deny</i>. Basically,
Legend:
Removed from v.1.3  
changed lines
  Added in v.1.6
  ViewVC Help
Powered by ViewVC 1.1.26