In some circumstances, the `list' right has no effect on directory listing.
According to Chapter 9 of the Sun Java System Web Server 6.1 Administrator’s
Guide, the `list' right is required to obtain directory listings
from directories that do not contain an index file. However, in certain circumstances
it is possible to obtain a directory listing, even if the applicable ACLs
deny the list right.
If you need to restrict directory indexing, it is recommended that you
do so by disabling indexing, as discussed in Chapter 16 of the Sun Java System
Web Server 6.1 Administrator’s Guide, instead of
(or in addition to) denying the list right.
|