IBM WebSphere V5.0 Security - CGISecurity

1. To add new user names or groups to the ACL, use the LDAP format for thename, but use forward slashes (/) as delimiters rather than commas (,). Forexample, if the name of a user in the LDAP directory is:cn=clerk01,o=ITSOthen you should enter in the database ACL:cn=clerk01/o=ITSO2. To add the name of a non-hierarchical LDAP directory group into an ACL, donot include the name of an attribute as part of the entry, but only the value forthe attribute. For example, if the name of the LDAP group is cn=managergrp,in the ACL enter only managergrp. However, if the name of the group ishierarchical, like cn=managergrp,o=ITSO, then you should entercn=managergrp/o=ITSO.Note: When the LDAP attributes correspond to the attributes used in Notes(for example: cn,ou,o,c), the ACL will not display the attributes. Forexample, cn=manager01/o=ITSO appears in the ACL as manager/ITSO3. To add users and groups to the ACL database, make sure that you havemanager access to the database and perform the following tasks:a. From the Notes Client, right-click the database icon on the workspace andselect Database -> Access Control.This will open an access control dialog box.b. Set the following ACL for the ITSOBankComments Application database.The table shows only entries related to the application; here we do notspecify all the entries as presented in Figure C-9. Similarly, we did notchange default authorizations to test the scenario. That is why theAuthorization column is left blank.Table C-1 Access control list specified for ITSOBankComments applicationPeople, servers,groupsUser type Access level AuthorizationDefault Unspecified NoAccess Noneclerk01/ITSO Person Authoraccountant01/ITSO Person Authormanager01/ITSO Person Author504 IBM WebSphere V5.0 Security Handbook