Access rules

prev next

General information

Access rules are used to control access to files and folders hosted by the WebHare webserver. Access rules can also be used to specify the rights that are available to specific HareScript files, and to setup a 'cgi-bin' directory containing scripts that can be executed over a web connection.

WebHare allows you to set global access rules (which apply to all WebHare webservers) or to set access rules that only apply to a specific webserver. These are called local access rules. Local rules do not have precedence over global rules - if you have a webserver-specific /intranet/ rule and a global /intranet/ rule, both rules will be applied on requests for files or subdirectories inside the /intranet/ directory.

Access rules are always cumulative - a user will have to be granted access by all rules that apply to a resource. For example, if you have a global rule protecting the /intranet/ directory, and a webserver-specific rule protecting /intranet/myfile.txt, a user will have to be permitted access by both rules when accessing /intranet/myfile.txt.

If such rules contradict each other, no one will be able to access the resource. For example, the /intranet/ rule only grants access to user 'john', but the /intranet/myfile.txt rule only grants access to users 'joe', no user will be able to access that file.

All rejections, and the reason for the rejection, are logged in the webserver's error log file.

Sections in this chapter     General information     Adding Access rules     Define IP masks for an Access rule     Define a WebHare user list for an Access rule     Define an external user list for an Access rule

prev next