1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
<?php
/*
* This file defines "named" access control lists, which can
* be reused in several places.
*/
$config = [
'adminlist' => [
//['allow', 'equals', 'mail', 'admin1@example.org'],
//['allow', 'has', 'groups', 'admin'],
// The default action is to deny access.
],
'example-simple' => [
['allow', 'equals', 'mail', 'admin1@example.org'],
['allow', 'equals', 'mail', 'admin2@example.org'],
// The default action is to deny access.
],
'example-deny-some' => [
['deny', 'equals', 'mail', 'eviluser@example.org'],
['allow'], // Allow everybody else.
],
'example-maildomain' => [
['allow', 'equals-preg', 'mail', '/@example\.org$/'],
// The default action is to deny access.
],
'example-allow-employees' => [
['allow', 'has', 'eduPersonAffiliation', 'employee'],
// The default action is to deny access.
],
'example-allow-employees-not-students' => [
['deny', 'has', 'eduPersonAffiliation', 'student'],
['allow', 'has', 'eduPersonAffiliation', 'employee'],
// The default action is to deny access.
],
'example-deny-student-except-one' => [
['deny', 'and',
['has', 'eduPersonAffiliation', 'student'],
['not', 'equals', 'mail', 'user@example.org'],
],
['allow'],
],
'example-allow-or' => [
['allow', 'or',
['equals', 'eduPersonAffiliation', 'student', 'member'],
['equals', 'mail', 'someuser@example2.org'],
],
],
'example-allow-all' => [
['allow'],
],
];
|
