11.1.2 Specifying the Default ACL for Groups in Calendar Server Version 6.3

You can change the default access control permissions for groups at various levels.

This section covers the following group ACL topics:

• 11.1.2.1 For All Groups

• 11.1.2.2 For All Groups in a Specific Domain

• 11.1.2.3 For a Specific Group in a Domain

11.1.2.1 For All Groups

The default ACL for groups in any domain is specified in the ics.conf file parameter group.default.acl. The default ACL is:

"@@o^a^r^g;@@o^c^wdeic^g;@^a^rsf^g"

You can change the ACL by editing it.

11.1.2.2 For All Groups in a Specific Domain

To change the default ACL for groups in a specific domain, you must edit the domain LDAP entry. Change the value of the groupdefaultacl property in the icsExtendedDomainPrefs attribute.

11.1.2.3 For a Specific Group in a Domain

To change the default ACL for a specific group, edit the group LDAP entry. Change the value of the icsDefaultacl attribute.