IBM WebSphere V5.0 Security - CGISecurity

1. To add new user names or groups to the ACL, use the LDAP format for the
name, but use forward slashes (/) as delimiters rather than commas (,). For
example, if the name of a user in the LDAP directory is:
cn=clerk01,o=ITSO
then you should enter in the database ACL:
cn=clerk01/o=ITSO
2. To add the name of a non-hierarchical LDAP directory group into an ACL, do
not include the name of an attribute as part of the entry, but only the value for
the attribute. For example, if the name of the LDAP group is cn=managergrp,
in the ACL enter only managergrp. However, if the name of the group is
hierarchical, like cn=managergrp,o=ITSO, then you should enter
cn=managergrp/o=ITSO.
Note: When the LDAP attributes correspond to the attributes used in Notes
(for example: cn,ou,o,c), the ACL will not display the attributes. For
example, cn=manager01/o=ITSO appears in the ACL as manager/ITSO
3. To add users and groups to the ACL database, make sure that you have
manager access to the database and perform the following tasks:
a. From the Notes Client, right-click the database icon on the workspace and
select Database -> Access Control.
This will open an access control dialog box.
b. Set the following ACL for the ITSOBankComments Application database.
The table shows only entries related to the application; here we do not
specify all the entries as presented in Figure C-9. Similarly, we did not
change default authorizations to test the scenario. That is why the
Authorization column is left blank.
Table C-1 Access control list specified for ITSOBankComments application
People, servers,
groups
User type Access level Authorization
Default Unspecified NoAccess None
clerk01/ITSO Person Author
accountant01/ITSO Person Author
manager01/ITSO Person Author
504 IBM WebSphere V5.0 Security Handbook