Contents      Dochome     
Sun Java(TM) System Server Console Online Help



Rights Tab of the ACI Editor

Use this dialog to specify the permissions granted or denied to the users and groups who have access to the target of the ACI. The permissions are listed in the table with a checkbox beside each one to specify whether it is granted or not.

Read. Select this right if you want authorized users and groups to be able to see the values of targeted entries and attributes.

Compare. Select this right if you want authorized users and groups to be able to compare targeted attribute values.

Search. Select this right if you want authorized users and groups to be able to determine if targeted attributes exist.

Selfwrite. Select this right if you want authorized users and groups to be able to write the value of their DN in the targeted attributes.

Write. Select this right if you want authorized users and groups to be able to modify targeted attributes.

Delete. Select this right if you want authorized users and groups to be able to delete targeted entries.

Add. Select this right if you want authorized users and groups to be able to add entries or attributes that would be controlled by this ACI.

Proxy. Select this right if an authorized user or group is allowed to perform an operation on behalf of another user. This is the only right that is not allowed by default.

You can also use the following buttons to specify rights:

Check All. Click this button to select all rights except proxying. The right to proxy must be granted independently.

Check None. Click this button to deselect all checkboxes and deny all rights, including proxying. When you none of the rights are granted, the ACI explicitly denies all rights.

Edit Manually. Click this button to view and edit the text of the ACI value as it is stored in the directory. Editing the ACI manually allows you to define advanced ACIs. Rights are defined in the permission part of the ACI using the allow and deny keywords. For more information about ACI syntax, see Chapter 6, "Managing Access Control," in the Directory Server Administration Guide.



Note

Advanced ACIs and some settings made in the ACI editor can no longer be configured "visually" through the tabs of the ACI editor once you click this button.




Contents      Dochome     
Copyright 2004 Sun Microsystems, Inc. All rights reserved.