Restricting Access to a File Type

You can limit access to file types. For example, you might want to allow only specific users to create programs that run on your server. Anyone would be able to run the programs but only specified users in the group would be able create or delete them.

To Restrict Access to File Types

1. Access the Server Manager for the server instance.

2. On the Preferences tab, click the Administer Access Control link.

3. Click Regular Expression in the Select A Resource section, and specify the regular expression, for example, *.cgi.

4. Click Edit.

5. Create a rule to allow read access to all users.

6. Create another rule that allows write and delete access only to a specified group.

7. Click Submit to save your changes.

   For file type restriction, you would leave both Continue boxes selected. If a request for a file comes in, the server then checks the ACL for the file type first.

   A Pathcheck function is created in the obj.conf file that might include wildcard patterns for files or directories. The entry in the ACL file would appear as follows: acl"*.cgi";