Hi all,
Pardon me for this basic question:
Does certifying a user with “/ACME” give him more permissions than certifying him with “West/ACME”?
Can someone advise me? Thanks!
Regards,
Teck-Lung
Subject: On certifying a user during user registration
No – in fact, it may result in fewer permissions. When a wildcard entry is used for permissions, whether that be ECL permissions, ACL permissions, or server access, a user certified with “/West/ACME” will have access to anything that has either “/West/ACME" or "/ACME” as an entry, while a user certified with “/ACME” will have access to things marked “/ACME" but NOT "/West/ACME”.
Subject: RE: On certifying a user during user registration
Hi Stan,
Many thanks for replying.
Let me make sure I get this straight if I certify with “/Acme” I can only authenticate with things marked as “*/Acme”?
Teck-Lung
Subject: RE: On certifying a user during user registration
Or where your full name is used, or where a group you belong to is used. The restrictions only comes into effect when a wildcard entry is used. For instance, if a daabase is to be used by all employees in the West Region of ACME, Inc., but not ny users in other regions (they have their own database, perhaps with slightly different information in it), you would use */West/ACME in the ACL to give everybody Reader access. If one of the employees in the West Region is mistakenly certified as John Smith/ACME, he won’t have access to the database until he is recertified or granted access some other way.
Subject: Many thanks, Stan!!!
Myself and my colleague read and we are clearer after your explanation. Many thanks!!!
Cheers,
Teck-Lung