23.6.2 To Restrict Access to Specific Tasks

An administrator typically connects to a server to perform one or more administrative tasks. Common administrative tasks are listed in the Messaging Server Tasks form in Console.

By default, access to a particular Messaging Server means access to all of its tasks. However, each task in the Task form can have an attached set of access-control instructions (ACIs). The server consults those ACIs before giving a connected user (who must already be a user with access permissions to the server as a whole) access to any of the tasks. In fact, the server displays in the Tasks form only those tasks to which the user has permission.

If you have access to a Messaging Server, you can create or edit ACIs on any of the tasks (that is, on any of the tasks to which you have access), and thus restrict the access that other users or groups can have to them.

To Restrict the Task Access of a User or Group

1. Log in to the Console as an administrator with access to the Messaging Server you want to provide restricted access to.

2. Open the server and select a task in the server’s Tasks form by clicking on the Task text.

3. From the Edit menu, choose Set Access Permissions, and add or edit the list of access rules to give a user or group the kind of access you want them to have.

4. Repeat the process for other tasks, as appropriate.

   (For more complete instructions, see the chapter on delegating server administration in Managing Servers with iPlanet Console.)

   ACIs and how to create them are described more fully in the chapter on delegating server administration in Managing Servers with iPlanet Console.