Setting Up Access Control for the Server Root Domain

Summary of Steps

1. Determine which access control records you must use to control access to the data in the server root domain.
2. To control access to data in a specific directory, place access control records in the DIRMAP file for the directory.
3. To set up common access control procedures for several directories, place access control records in an ACCESS file.

Steps in Detail

1. Determine which access control records you must use to control access to the data in the server root domain.

2. To control acess to data in a specific directory, place access control records in the DIRMAP file for the directory.

   Place the access control records after all directory control records in the DIRMAP file. The access control records in a DIRMAP file control access to data in the current directory. What the current directory is depends on how you serve data:

   • From a minidisk or using CMS search order

     The current directory is a logical directory defined by the DIRMAP file.

   • From an SFS directory

     The current directory is either a logical directory or an SFS directory.

   • From a BFS directory

     The current directory is either a logical directory or a BFS directory.

3. To set up common access control procedures for several directories, place access control records in an ACCESS file.

   To point to the ACCESS file, place a SKIP TOFILE access control record in the DIRMAP file for a directory.

   For example, the server root domain is defined as a minidisk. The SERVER ACCESS file contains the access control procedures for all data in the server root domain:

          VMWEBSRV DIRMAP                 
          ------------------------        
          DIR RULES      RULES            
          FILE LIST.HTML LIST HTML        
                                          
          * Access Control Records        
          SELECT                          
    +------ SKIP TOFILE SERVER CURDIR     
    |     END SELECT                      
    |                                     
    |     RULES DIRMAP                    
    |     --------------------------------
    |     * Directory Control Records     
    |     FILE FOOTBALL.HTML FTBLRULE HTML
    |     FILE SOCCER.HTML   SCCRRULE HTML
    |                                     
    |     * Access Control Records        
    |     SELECT                          
    +------ SKIP TOFILE SERVER CURDIR     
    |     END SELECT                      
    |                                     
    +---->SERVER ACCESS                
          --------------------------------
          SELECT                          
            WHEN IP 199.8.29.*            
              ALLOW                       
          END SELECT