Contents      Dochome     
Sun Java(TM) System Server Console Online Help



Access Permissions Help

Access permissions determine which directory users are allowed to read, modify or delete an entry. Access permissions are defined by access control instructions (ACIs) stored in the aci attribute of entries throughout the directory tree. ACIs grant or deny access based on many factors such as the requestor's identity and the attributes and the values that are being accessed. For an overview of access control, see "Designing Access Control" in Chapter 7 of the Directory Server Deployment Guide.

Often, individual entries do not need specific access control because they inherit access permissions of their parent nodes. For example, a new user entry will inherit the same permissions as all other user entries in the same subtree. However, you may also define specific permissions on any entry in the directory.

To modify the ACIs on an entry, you must select that entry on the Directory tab of the Directory Server console and select Object>Set Access Permissions. For more information, see Chapter 6, "Managing Access Control," in the Directory Server Administration Guide.

Access permissions also apply to elements of the Console interface. You may restrict access to servers and screen elements such as the topology tree based on the user's identity. For more information, see Chapter 9, "Access Control," in the Administration Server Administration Guide.


Contents      Dochome     
Copyright 2005 Sun Microsystems, Inc. All rights reserved.