Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: kenndenn on June 15, 2005, 09:14:41 PM

Title: How do I restrict user access to primary web folders.
Post by: kenndenn on June 15, 2005, 09:14:41 PM

I want to provide multiple virtual domains and give each user access to there own web ibay via user/group access restrictions.  This works for the ibay folders but the user still has access to the primary folders and files.  How do I restrict users from getting into the primary folder?

Title: How do I restrict user access to primary web folders.
Post by: kenndenn on July 01, 2005, 01:16:41 AM

I guess nobody cares...

Title: Re: How do I restrict user access to primary web folders.
Post by: raem on July 01, 2005, 01:54:55 AM

kenndenn

>....but the user still has access to the primary
> folders and files.  How do I restrict users from
> getting into the primary folder?

It's not a case of know one cares, no one knows what you are talking about.
What type of access are you talking about, web, LAN filesharing, ftp, ssh ???

By default only the admin user can write to the primary folder using LAN filesharing.
LAN & Web users will of course have read access to the primary ibay.
If you don't want people to see your primary ibay content then don't have anything in it.
You can configure the system to use an ibay for the primary site content, as you have done for virtual domains.

Title: do it using .htaccess files...
Post by: icpix on July 02, 2005, 03:18:13 AM

kenndenn----

To control LAN accesses try using group permissions.

To control web accesses try using .htaccess files. Put one of the following in all the directories you want to place off limits. If you haven't enabled the use of .htaccess then there's a contribution for just such a task (ie search for it).

[.htaccess]
Options +FollowSymLinks
RewriteEngine On
# foobah.co.uk/
# only my workstation uses foobah.co.uk and
# everybody else gets the room 101 treatment
RewriteCond %{REMOTE_ADDR} !^192\.168\.x\.y$
RewriteRule .* - [F,L]

(Where x y is the remaining LAN IP address of your workstation)

----best wishes, Robert