Applicable in PathCheck-class directives.
The check-acl function specifies an access control list (ACL) to use to check whether the client is allowed to access the requested resource. An access control list contains information about who is allowed to access a resource, and under what conditions access is allowed.
Regardless of the order of PathCheck directives in the object, check-acl functions are executed first. These functions cause user authentication to be performed, if required by the specified ACL, and will also update the access control state.
The following table describes parameters for the check-acl function.
Table 5–49 check-acl Parameters
Parameter |
Description |
---|---|
Name of an access control list |
|
path |
(Optional) Wildcard pattern that specifies the path for which to apply the ACL |
bucket |
(Optional) Common to all obj.conf functions |
PathCheck fn=check-acl acl="*HRonly*" |