Web Server User Lists (Compact 2013)
3/26/2014
It is possible to set access permissions on a per-virtual-root basis. In this way, specific users can be granted access to certain directories without allowing everyone access or having to add the users to the Administrative groups.
To set permissions this way, set the UserList value for the appropriate virtual root with the list of users and groups who have access to it or are denied access to it. For more information, see Web Server Access Rights.
The following example shows how to allow users Maxine Benson and Ronda Mack, and the SomeGroup group, but restrict the Ola Davidson user and the villains group.
UserList="Maxine Benson; Ronda Mack;-Ola Davidson;@SomeGroup;-@villains"
Note
The format "" or "@" allows all users, and "-" or "-@" denies all users.
The string is interpreted sequentially. In other words, if Maxine Benson is a member of the Finance group, the following strings will allow her access to the server.
Maxine Benson
@ Finance
@ Finance; Maxine Benson
Maxine Benson;@ Finance
@ Finance;- Maxine Benson
Maxine Benson;-@ Finance
Maxine Benson;- Maxine Benson
*;-Maxine Benson;-@ Finance
The following strings will restrict Maxine Benson's access to the server.
-Maxine Benson
-@ Finance
-Maxine Benson;@ Finance
-@ Finance; Maxine Benson
-Maxine Benson; Maxine Benson
-Maxine Benson;*
Note
The * format indicates a group, and it must be used in the list. It is possible that parsers understand both @* and * format, but they always use @* syntax.
Note that administrators always have access to virtual roots with A set to 1, even if they are not on the user list for that root. This access applies even if the administrators are denied access explicitly in the UserList value.
See Also
Concepts
Web Server Authentication and Permissions