directory-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From build...@apache.org
Subject svn commit: r843049 [1/3] - in /websites/staging/directory/trunk/content: ./ apacheds/advanced-ug/
Date Wed, 19 Dec 2012 04:46:52 GMT
Author: buildbot
Date: Wed Dec 19 04:46:47 2012
New Revision: 843049

Log:
Staging update by buildbot for directory

Added:
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4-authentication-and-authorization.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5-authorization.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.1-introduction.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.10-aci-grammar.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.11-links-and-references.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.2-definitions.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.3-enabling-access-control.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.4-aci-types.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.4.1-entryaci.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.4.2-prescriptiveaci.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.4.3-subentryaci.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.5-aci-elements.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.5.1-userclasses.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.5.2-protecteditems.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.5.3-permissions.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.5.4-subtrees.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.6-the-acdf-engine.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.6.1-how-it-works.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.6.2-selections.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.6.3-constraints.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.6.4-priority.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.7-using-acis-trail.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.7.1-enable-authenticated-users-to-browse-and-read-entries.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.8-acis-administration.html
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.9-migration-from-other-ldap-servers.html
Modified:
    websites/staging/directory/trunk/content/   (props changed)
    websites/staging/directory/trunk/content/apacheds/advanced-ug/3-admin-model.html

Propchange: websites/staging/directory/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Wed Dec 19 04:46:47 2012
@@ -1 +1 @@
-1423751
+1423760

Modified: websites/staging/directory/trunk/content/apacheds/advanced-ug/3-admin-model.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/3-admin-model.html (original)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/3-admin-model.html Wed Dec 19 04:46:47 2012
@@ -119,7 +119,7 @@
         </div>
         <div class="nav_next">
         
-            <a href="4-.html">4 - </a>
+            <a href="4-authentication-and-authorization.html">4 - Authentication and Authorization</a>
 		
         </div>
         <div class="clearfix"></div>
@@ -190,7 +190,7 @@
         </div>
         <div class="nav_next">
         
-            <a href="4-.html">4 - </a>
+            <a href="4-authentication-and-authorization.html">4 - Authentication and Authorization</a>
 		
         </div>
         <div class="clearfix"></div>

Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/4-authentication-and-authorization.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/4-authentication-and-authorization.html (added)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/4-authentication-and-authorization.html Wed Dec 19 04:46:47 2012
@@ -0,0 +1,164 @@
+<!DOCTYPE html>
+<!--
+    Licensed to the Apache Software Foundation (ASF) under one or more
+    contributor license agreements.  See the NOTICE file distributed with
+    this work for additional information regarding copyright ownership.
+    The ASF licenses this file to You under the Apache License, Version 2.0
+    (the "License"); you may not use this file except in compliance with
+    the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<html>
+	<head>
+		<title>4 - Authentication &amp; Authorization &mdash; Apache Directory</title>
+		
+        <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+    	<link href="./../../css/green.css" rel="stylesheet" type="text/css">
+    
+	</head>
+	<body>
+	    <div id="container">
+            <div id="header">
+                <div id="subProjectsNavBar">
+                    <a href="./../../">
+                        
+                        Apache Directory Project
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../apacheds">
+                        
+                        <STRONG>ApacheDS</STRONG>
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../studio">
+                        
+                        Apache Directory Studio
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../api">
+                        
+                        Apache LDAP API
+                        
+                    </a>
+                </div><!-- subProjectsNavBar -->
+            </div><!-- header -->
+            <div id="content">
+                <div id="leftColumn">
+                    
+<div id="navigation">
+    
+    <h5>ApacheDS 2.0</h5>
+    <ul>
+        <li><a href="./../../apacheds/">Home</a></li>
+        <li><a href="./../../apacheds/features.html">Features</a></li>
+    </ul>
+    <h5>Downloads</h5>
+    <ul>
+        <li><a href="./../../apacheds/downloads.html">ApacheDS 2.0.0-M8</a>&nbsp;&nbsp;<img src="./../../images/new_badge.gif" alt="" style="margin- bottom:- 3px;" border="0"></li>
+        <li><a href="./../../apacheds/download-old-versions.html">Older versions</a></li>
+    </ul>
+    <h5>Documentation</h5>
+    <ul>
+        <li><a href="./../../apacheds/basic-users-guide.html">Basic User's Guide </a></li>
+        <li><a href="./../../apacheds/advanced-users-guide.html">Advanced User's Guide</a></li>
+        <li><a href="./../../apacheds/developers-guide.html">Developer's Guide</a></li>
+        <li><a href="./../../apacheds/configuration/ads-2.0-configuration.html">Configuration</a></li>
+            <!--li><a href="./../../apacheds/gen-docs/latest">Generated Reports (e.g. JavaDocs)</a></li-->
+    </ul>
+    
+    
+    <h5>Support</h5>
+    <ul>
+        <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists &amp; IRC</a></li>
+        <li><a href="./../../sources.html">Sources</a></li>
+        <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+        <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+    </ul>
+    <h5>Community</h5>
+    <ul>
+        <li><a href="./../../contribute.html">How to Contribute</a></li>
+        <li><a href="./../../team.html">Team</a></li>
+        <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+        <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+    </ul>
+    <h5>About Apache</h5>
+    <ul>
+        <li><a href="http://www.apache.org/">Apache</a></li>
+        <li><a href="http://www.apache.org/licenses/">License</a></li>
+        <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+        <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+        <li><a href="http://www.apache.org/security/">Security</a></li>
+    </ul>
+    
+</div><!-- navigation -->
+
+                </div><!-- leftColumn -->
+                <div id="rightColumn">
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="3-admin-model.html">3 Administrative Model</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="../advanced-users-guide.html">Advanced User Guide</a>
+		
+        </div>
+        <div class="nav_next">
+        
+			&nbsp;
+        
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+<h1 id="4-authentication-and-authorization">4 - Authentication and Authorization</h1>
+<h2 id="chapter-content">Chapter content</h2>
+<ul>
+<li><a href="4.5-authorization.html">4.5 - Authorization</a></li>
+</ul>
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="3-admin-model.html">3 Administrative Model</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="../advanced-users-guide.html">Advanced User Guide</a>
+		
+        </div>
+        <div class="nav_next">
+        
+			&nbsp;
+        
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+                </div><!-- rightColumn -->
+                <div id="endContent"></div>
+            </div><!-- content -->
+            <div id="footer">&copy; 2003-2012, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+                Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+            </div>
+        </div><!-- container -->
+    </body>
+</html>
\ No newline at end of file

Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5-authorization.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5-authorization.html (added)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5-authorization.html Wed Dec 19 04:46:47 2012
@@ -0,0 +1,212 @@
+<!DOCTYPE html>
+<!--
+    Licensed to the Apache Software Foundation (ASF) under one or more
+    contributor license agreements.  See the NOTICE file distributed with
+    this work for additional information regarding copyright ownership.
+    The ASF licenses this file to You under the Apache License, Version 2.0
+    (the "License"); you may not use this file except in compliance with
+    the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<html>
+	<head>
+		<title>4.5. Authorization &mdash; Apache Directory</title>
+		
+        <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+    	<link href="./../../css/green.css" rel="stylesheet" type="text/css">
+    
+	</head>
+	<body>
+	    <div id="container">
+            <div id="header">
+                <div id="subProjectsNavBar">
+                    <a href="./../../">
+                        
+                        Apache Directory Project
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../apacheds">
+                        
+                        <STRONG>ApacheDS</STRONG>
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../studio">
+                        
+                        Apache Directory Studio
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../api">
+                        
+                        Apache LDAP API
+                        
+                    </a>
+                </div><!-- subProjectsNavBar -->
+            </div><!-- header -->
+            <div id="content">
+                <div id="leftColumn">
+                    
+<div id="navigation">
+    
+    <h5>ApacheDS 2.0</h5>
+    <ul>
+        <li><a href="./../../apacheds/">Home</a></li>
+        <li><a href="./../../apacheds/features.html">Features</a></li>
+    </ul>
+    <h5>Downloads</h5>
+    <ul>
+        <li><a href="./../../apacheds/downloads.html">ApacheDS 2.0.0-M8</a>&nbsp;&nbsp;<img src="./../../images/new_badge.gif" alt="" style="margin- bottom:- 3px;" border="0"></li>
+        <li><a href="./../../apacheds/download-old-versions.html">Older versions</a></li>
+    </ul>
+    <h5>Documentation</h5>
+    <ul>
+        <li><a href="./../../apacheds/basic-users-guide.html">Basic User's Guide </a></li>
+        <li><a href="./../../apacheds/advanced-users-guide.html">Advanced User's Guide</a></li>
+        <li><a href="./../../apacheds/developers-guide.html">Developer's Guide</a></li>
+        <li><a href="./../../apacheds/configuration/ads-2.0-configuration.html">Configuration</a></li>
+            <!--li><a href="./../../apacheds/gen-docs/latest">Generated Reports (e.g. JavaDocs)</a></li-->
+    </ul>
+    
+    
+    <h5>Support</h5>
+    <ul>
+        <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists &amp; IRC</a></li>
+        <li><a href="./../../sources.html">Sources</a></li>
+        <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+        <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+    </ul>
+    <h5>Community</h5>
+    <ul>
+        <li><a href="./../../contribute.html">How to Contribute</a></li>
+        <li><a href="./../../team.html">Team</a></li>
+        <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+        <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+    </ul>
+    <h5>About Apache</h5>
+    <ul>
+        <li><a href="http://www.apache.org/">Apache</a></li>
+        <li><a href="http://www.apache.org/licenses/">License</a></li>
+        <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+        <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+        <li><a href="http://www.apache.org/security/">Security</a></li>
+    </ul>
+    
+</div><!-- navigation -->
+
+                </div><!-- leftColumn -->
+                <div id="rightColumn">
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="3-admin-model.html">3 - Administrative Model</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="3-admin-model.html">3 - Administrative Model</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="3.2-operations-on-an-administrativepoint.html">3.2 Operations on an a Administrative Point</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+<p>{scrollbar}</p>
+<p>ApacheDS uses an adaptation of the X.500 basic access control scheme in
+combination with X.500 subentries to control access to entries and
+attributes within the DIT. This document will show you how to enable the
+basic access control mechanism and how to define access control information
+to manage access to protected resources.</p>
+<h2 id="chapter-content">Chapter content</h2>
+<ul>
+<li><a href="4.5.1-introduction.html">4.5.1 - Introduction</a></li>
+<li><a href="4.5.2-definitions.html">4.5.2 - Definitions</a></li>
+<li><a href="4.5.3-enabling-access-control.html">4.5.3 - Enabling access control</a></li>
+<li><a href="4.5.4-aci-types.html">4.5.4 - Aci Types</a></li>
+<li><a href="4.5.5-aci-elements.html">4.5.5 - Aci Elements</a></li>
+<li><a href="4.5.6-the-acdf-engine.html">4.5.6 - The Acdf Engine</a></li>
+<li><a href="4.5.7-using-acis-trail.html">4.5.7 - Using Acis Trail</a></li>
+<li><a href="4.5.8-acis-administration.html">4.5.8 - Acis Administration</a></li>
+<li><a href="4.5.9-migration-from-other-ldap-servers.html">4.5.9 - Migration from other Ldap Servers</a></li>
+<li><a href="4.5.10-aci-grammar.html">4.5.10 - Aci Grammar</a></li>
+<li><a href="4.5.11-links-and-references.html">4.5.11 - Links and References</a></li>
+</ul>
+<h2 id="some-simple-examples">Some Simple Examples</h2>
+<p>The ACIItem syntax is very expressive and that makes it extremely powerful
+for specifying complex access control policies. However the syntax is not
+very easy to grasp for beginners. For this reason we start with simple
+examples that focus on different protection mechanisms offered by the
+ACIItem syntax. We do this instead of specifying the grammar which is not
+the best way to learn a language.</p>
+<p>{warning:title=Before you go any further...}
+Please don't go any further until you have read up on the use of
+Subentries. Knowledge of subentries, subtreeSpecifications, administrative
+areas, and administrative roles are required to properly digest the
+following material.
+{warning}</p>
+<p>Before going on to these trails you might want to set up an Administrative
+Area for managing access control via prescriptiveACI.  Both subentryACI and
+prescriptiveACI require the presence of an Administrative Point entry.  For
+more information and code examples see <a href="acareas.html">ACAreas</a>
+. </p>
+<h3 id="aci-trails">ACI Trails</h3>
+<p>Here are some trails that resemble simple HOWTO guides.  They're ordered
+with the most pragmatic usage first.  We will add to these trails over
+time.</p>
+<table>
+<tr><th>Trail</th><th>Description</th></tr>
+<tr><td>[EnableSearchForAllUsers](enablesearchforallusers.html)
+</td><td>Enabling access to browse and read all entries and their attributes by
+authenticated users.</td></tr>
+<tr><td>DenySubentryAccess (TBW) </td><td> Protecting access to subentries themselves.</td></tr>
+<tr><td>[AllowSelfPasswordModify](allowselfpasswordmodify.html)
+</td><td>Granting users the rights needed to change their own passwords.</td></tr>
+<tr><td>GrantAddDelModToGroup (TBW)</td><td>Granting add, delete, and modify permissions
+to a group of users.</td></tr>
+<tr><td>GrantModToEntry (TBW)</td><td>Applying ACI to a single entry.</td></tr>
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="3-admin-model.html">3 - Administrative Model</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="3-admin-model.html">3 - Administrative Model</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="3.2-operations-on-an-administrativepoint.html">3.2 Operations on an a Administrative Point</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+                </div><!-- rightColumn -->
+                <div id="endContent"></div>
+            </div><!-- content -->
+            <div id="footer">&copy; 2003-2012, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+                Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+            </div>
+        </div><!-- container -->
+    </body>
+</html>
\ No newline at end of file

Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.1-introduction.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.1-introduction.html (added)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.1-introduction.html Wed Dec 19 04:46:47 2012
@@ -0,0 +1,180 @@
+<!DOCTYPE html>
+<!--
+    Licensed to the Apache Software Foundation (ASF) under one or more
+    contributor license agreements.  See the NOTICE file distributed with
+    this work for additional information regarding copyright ownership.
+    The ASF licenses this file to You under the Apache License, Version 2.0
+    (the "License"); you may not use this file except in compliance with
+    the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<html>
+	<head>
+		<title>4.5.1 Introduction &mdash; Apache Directory</title>
+		
+        <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+    	<link href="./../../css/green.css" rel="stylesheet" type="text/css">
+    
+	</head>
+	<body>
+	    <div id="container">
+            <div id="header">
+                <div id="subProjectsNavBar">
+                    <a href="./../../">
+                        
+                        Apache Directory Project
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../apacheds">
+                        
+                        <STRONG>ApacheDS</STRONG>
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../studio">
+                        
+                        Apache Directory Studio
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../api">
+                        
+                        Apache LDAP API
+                        
+                    </a>
+                </div><!-- subProjectsNavBar -->
+            </div><!-- header -->
+            <div id="content">
+                <div id="leftColumn">
+                    
+<div id="navigation">
+    
+    <h5>ApacheDS 2.0</h5>
+    <ul>
+        <li><a href="./../../apacheds/">Home</a></li>
+        <li><a href="./../../apacheds/features.html">Features</a></li>
+    </ul>
+    <h5>Downloads</h5>
+    <ul>
+        <li><a href="./../../apacheds/downloads.html">ApacheDS 2.0.0-M8</a>&nbsp;&nbsp;<img src="./../../images/new_badge.gif" alt="" style="margin- bottom:- 3px;" border="0"></li>
+        <li><a href="./../../apacheds/download-old-versions.html">Older versions</a></li>
+    </ul>
+    <h5>Documentation</h5>
+    <ul>
+        <li><a href="./../../apacheds/basic-users-guide.html">Basic User's Guide </a></li>
+        <li><a href="./../../apacheds/advanced-users-guide.html">Advanced User's Guide</a></li>
+        <li><a href="./../../apacheds/developers-guide.html">Developer's Guide</a></li>
+        <li><a href="./../../apacheds/configuration/ads-2.0-configuration.html">Configuration</a></li>
+            <!--li><a href="./../../apacheds/gen-docs/latest">Generated Reports (e.g. JavaDocs)</a></li-->
+    </ul>
+    
+    
+    <h5>Support</h5>
+    <ul>
+        <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists &amp; IRC</a></li>
+        <li><a href="./../../sources.html">Sources</a></li>
+        <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+        <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+    </ul>
+    <h5>Community</h5>
+    <ul>
+        <li><a href="./../../contribute.html">How to Contribute</a></li>
+        <li><a href="./../../team.html">Team</a></li>
+        <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+        <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+    </ul>
+    <h5>About Apache</h5>
+    <ul>
+        <li><a href="http://www.apache.org/">Apache</a></li>
+        <li><a href="http://www.apache.org/licenses/">License</a></li>
+        <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+        <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+        <li><a href="http://www.apache.org/security/">Security</a></li>
+    </ul>
+    
+</div><!-- navigation -->
+
+                </div><!-- leftColumn -->
+                <div id="rightColumn">
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="4.5-authorization.html">4.5 - Authorization</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="4.5-authorization.html">4.5 - Authorization</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="4.5.2-definitions.html">4.5.2 Definitions</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+<p>First of all, one has to understand that Authorization in this context
+involves four components. The principle is :</p>
+<p>{panel} grants <em>Users</em> authorization to proceed some <em>Action</em> on a set of
+<em>Items</em> in a defined <em>Area</em>{panel}</p>
+<p>Let's define the four components.</p>
+<p><em>Users</em> :
+bq. the set of entity being able to do some action. It can be every user,
+the entry owner, a list of users, members of a group or a selection in the
+DIT. Basically, a <em>user</em> is defined as an entry in the DIT. </p>
+<p><em>Action</em> :
+bq. Generally speaking, a grant or denial to do something, depending on the
+selected item (read, delete, etc).</p>
+<p><em>Items</em> :
+bq. An <em>item</em> is an element of the DIT. It can be an Entry, an
+AttributeType, some AttributeValues. It can also define some constraints
+that will apply on the selected entries.</p>
+<p><em>Area</em> :
+bq.It defines the set of entries on which the defined ACI applies. It can
+be the whole DIT, a part of the DIT, a selection of entries, an Entry.</p>
+<p>We implement those elements using <em>ACI</em>s.</p>
+<p>The following chapters will present you the system inside out.</p>
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="4.5-authorization.html">4.5 - Authorization</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="4.5-authorization.html">4.5 - Authorization</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="4.5.2-definitions.html">4.5.2 Definitions</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+                </div><!-- rightColumn -->
+                <div id="endContent"></div>
+            </div><!-- content -->
+            <div id="footer">&copy; 2003-2012, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+                Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+            </div>
+        </div><!-- container -->
+    </body>
+</html>
\ No newline at end of file

Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.10-aci-grammar.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.10-aci-grammar.html (added)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.10-aci-grammar.html Wed Dec 19 04:46:47 2012
@@ -0,0 +1,373 @@
+<!DOCTYPE html>
+<!--
+    Licensed to the Apache Software Foundation (ASF) under one or more
+    contributor license agreements.  See the NOTICE file distributed with
+    this work for additional information regarding copyright ownership.
+    The ASF licenses this file to You under the Apache License, Version 2.0
+    (the "License"); you may not use this file except in compliance with
+    the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<html>
+	<head>
+		<title>4.5.10 ACI grammar &mdash; Apache Directory</title>
+		
+        <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+    	<link href="./../../css/green.css" rel="stylesheet" type="text/css">
+    
+	</head>
+	<body>
+	    <div id="container">
+            <div id="header">
+                <div id="subProjectsNavBar">
+                    <a href="./../../">
+                        
+                        Apache Directory Project
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../apacheds">
+                        
+                        <STRONG>ApacheDS</STRONG>
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../studio">
+                        
+                        Apache Directory Studio
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../api">
+                        
+                        Apache LDAP API
+                        
+                    </a>
+                </div><!-- subProjectsNavBar -->
+            </div><!-- header -->
+            <div id="content">
+                <div id="leftColumn">
+                    
+<div id="navigation">
+    
+    <h5>ApacheDS 2.0</h5>
+    <ul>
+        <li><a href="./../../apacheds/">Home</a></li>
+        <li><a href="./../../apacheds/features.html">Features</a></li>
+    </ul>
+    <h5>Downloads</h5>
+    <ul>
+        <li><a href="./../../apacheds/downloads.html">ApacheDS 2.0.0-M8</a>&nbsp;&nbsp;<img src="./../../images/new_badge.gif" alt="" style="margin- bottom:- 3px;" border="0"></li>
+        <li><a href="./../../apacheds/download-old-versions.html">Older versions</a></li>
+    </ul>
+    <h5>Documentation</h5>
+    <ul>
+        <li><a href="./../../apacheds/basic-users-guide.html">Basic User's Guide </a></li>
+        <li><a href="./../../apacheds/advanced-users-guide.html">Advanced User's Guide</a></li>
+        <li><a href="./../../apacheds/developers-guide.html">Developer's Guide</a></li>
+        <li><a href="./../../apacheds/configuration/ads-2.0-configuration.html">Configuration</a></li>
+            <!--li><a href="./../../apacheds/gen-docs/latest">Generated Reports (e.g. JavaDocs)</a></li-->
+    </ul>
+    
+    
+    <h5>Support</h5>
+    <ul>
+        <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists &amp; IRC</a></li>
+        <li><a href="./../../sources.html">Sources</a></li>
+        <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+        <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+    </ul>
+    <h5>Community</h5>
+    <ul>
+        <li><a href="./../../contribute.html">How to Contribute</a></li>
+        <li><a href="./../../team.html">Team</a></li>
+        <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+        <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+    </ul>
+    <h5>About Apache</h5>
+    <ul>
+        <li><a href="http://www.apache.org/">Apache</a></li>
+        <li><a href="http://www.apache.org/licenses/">License</a></li>
+        <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+        <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+        <li><a href="http://www.apache.org/security/">Security</a></li>
+    </ul>
+    
+</div><!-- navigation -->
+
+                </div><!-- leftColumn -->
+                <div id="rightColumn">
+
+
+
+<p>{scrollbar}</p>
+<p>The ACI attributes store data following a specific structure, which is
+define by this grammar :</p>
+<p>{newcode:title=ACI grammar|linenumbers=true|lang=xml}
+<wrapperEntryPoint> ::= <SP*> '{' <SP*> <mainACIItemComponent> <SP*>
+<mainACIItemComponents> '}' <SP*> EOF</p>
+<p><mainACIItemComponents> ::= ',' <SP*> <mainACIItemComponent> <SP*>
+<mainACIItemComponents> | e</p>
+<p>** Note : we have to allow only one of each option
+<mainACIItemComponent> ::= 
+    "identificationTag" <SP+> SAFEUTF8STRING
+    | "precedence" <SP+> INTEGER
+    | "authenticationLevel" <SP+> <authenticationLevel>
+    | "itemOrUserFirst" <SP+> <itemOrUserFirst></p>
+<p><authenticationLevel> ::= "none" | "simple" | "strong"</p>
+<p><itemOrUserFirst> ::= 
+           "itemFirst" <SP*> ':' <SP*> '{' <SP*> <itemType> <SP*>
+'}' 
+           | 
+           "userFirst" <SP*> ':' <SP*> '{' <SP*> <userType> <SP*>
+'}'</p>
+<p><itemType> ::= 
+        "protectedItems" <SP*> '{' <SP*> <protectedItem?> '}' <SP*> 
+                 ',' <SP*> '{' <SP*> <anyItemPermission> <SP*>
+<anyItemPermission*> '}'
+        | 
+        "itemPermissions" <SP+> '{' <SP*> <itemPermissions?> '}' <SP*> 
+                 ',' <SP*> "protectedItems" <SP*> '{' <SP*>
+<protectedItem?> '}'</p>
+<p><userType> ::= 
+         "userClasses" <SP+> '{' <SP*> <userClass?> '}' <SP*> ',' 
+                   <SP*> '{' <SP*> <anyUserPermission> <SP*>
+<anyUserPermission*> '}'
+          |
+          "userPermissions" <SP+> '{' <SP*> <userPermissions?> '}'
+<SP*> ',' 
+                   <SP*> "userClasses" <SP+> '{' <SP*>
+<userClass?> '}'</p>
+<protectedItem?> ::= <protectedItem> <SP*> <protectedItem*> | e
+
+<protectedItem*> ::= ',' <SP*> <protectedItem> <SP*> <protectedItem*> | e
+
+<protectedItem> ::= 
+    "entry"
+    | "allUserAttributeTypes"
+    | "attributeType" <SP+> '{' <SP*> <oid> <SP*> <oids> '}'
+    | "allAttributeValues" <SP+> '{' <SP*> <oid> <SP*> <oids> '}'
+    | "allUserAttributeTypesAndValues"
+    | ATTRIBUTE_VALUE_CANDIDATE
+    | "selfValue" <SP+> '{' <SP*> <oid> <SP*> <oids> '}'
+    | RANGE_OF_VALUES_CANDIDATE
+    | "maxValueCount" <SP+> '{' <SP*> '{' <SP*> <valueCountType> <SP*> '}'
+<SP*> <maxValueCount*> '}'
+    | "maxImmSub" <SP+> INTEGER
+    | "restrictedBy" <SP+> '{' <SP*> '{' <SP*> <typeValueIn> <SP*> '}'
+<SP*> <restrictedValue*> '}'
+    | "classes" <SP+> <refinement>
+
+<maxValueCount*> ::= ',' <SP*> '{' <SP*> <valueCountType> <SP*> '}' <SP*>
+<maxValueCount*> | e
+
+<valueCountType> ::= 
+           "type" <SP+> <oid> <SP*> ',' <SP*> "maxCount" <SP+>
+INTEGER 
+            | 
+           "maxCount" <SP+> INTEGER <SP*> ',' <SP*> "type" <SP+>
+<oid> 
+
+<restrictedValue*> ::= ',' <SP*> '{' <SP*> <typeValueIn> <SP*> '}' <SP*>
+<restrictedValue*> | e 
+
+<typeValueIn> ::=
+        "type" <SP+> <oid> <SP*> ',' <SP*> "valuesIn" <SP+> <oid>
+        |
+        "valuesIn" <SP+> <oid> <SP*> ',' <SP*> "type" <SP+> <oid>
+
+<oids> ::= ',' <SP*> <oid> <SP*> <oids> | e
+
+<itemPermissions?> ::= '{' <SP*> <anyItemPermission> <SP*>
+<anyItemPermission*> '}' <SP*> <itemPermissions*> | e
+
+<itemPermissions*> ::= 
+             ',' <SP*> '{' <SP*> <anyItemPermission> <SP*>
+<anyItemPermission*> '}' <SP*> <itemPermissions*> | e
+
+<anyItemPermission*> ::= ',' <SP*> <anyItemPermission> <SP*>
+<anyItemPermission*> | e
+
+<anyItemPermission> :
+    "precedence" <SP+> <INTEGER>
+    | "userClasses" <SP+> '{' <SP*> <userClass?> '}'
+    | "grantsAndDenials" <SP+> '{' <SP*> <grantAndDenial?> '}'
+
+<grantAndDenial?> ::= <grantAndDenial> <SP*> <grantAndDenial*> | e
+
+<grantAndDenial*> ::= ',' <SP*> <grantAndDenial> <SP*> <grantAndDenial*>
+
+<grantAndDenial> :
+    "grantAdd" 
+    | "denyAdd" 
+    | "grantDiscloseOnError"
+    | "denyDiscloseOnError" 
+    | "grantRead" 
+    | "denyRead" 
+    | "grantRemove" 
+    | "denyRemove" 
+    | "grantBrowse" 
+    | "denyBrowse" 
+    | "grantExport"
+    | "denyExport" 
+    | "grantImport" 
+    | "denyImport" 
+    | "grantModify" 
+    | "denyModify" 
+    | "grantRename" 
+    | "denyRename"
+    | "grantReturnDN"
+    | "denyReturnDN" 
+    | "grantCompare" 
+    | "denyCompare" 
+    | "grantFilterMatch"
+    | "denyFilterMatch" 
+    | "grantInvoke"
+    | "denyInvoke"
+
+<userClass?> ::= <userClass> <SP*> <userClass*> | e
+
+<userClass*> ::= ',' <SP*> <userClass> <SP*> <userClass*> | e
+
+<userClass> :
+    "allUsers"
+    | "thisEntry"
+    | "parentOfEntry"
+    | "name" <SP+> '{' <SP*> <distinguishedName> <SP*> <name*> '}'
+    | "userGroup" <SP+> '{' <SP*> <distinguishedName> <SP*> <userGroup*>
+'}'
+    | "subtree" <SP+> '{' <SP*> '{' <SP*> <subtreeSpecificationComponent?>
+'}' <SP*> <subTree*> '}'
+
+<name*> ::= ',' <SP*> <distinguishedName> <SP*> <name*> | e
+
+<userGroup*> ::= ',' <SP*> <distinguishedName> <SP*> <userGroup*> | e
+
+<subTree*> ::= ',' <SP*> '{' <SP*> <subtreeSpecificationComponent?> '}'
+<SP*> <subTree*> | e
+
+<userPermissions?> ::= '{' <SP*> <anyUserPermission> <SP*>
+<anyUserPermission*> '}' <SP*> <userPermissions*> | e
+
+<userPermissions*> ::= 
+             ',' <SP*> '{' <SP*> <anyUserPermission> <SP*>
+<anyUserPermission*> '}' <SP*> <userPermissions*> | e
+
+<anyUserPermission*> ::= ',' <SP*> <anyUserPermission> <SP*>
+<anyUserPermission*> | e
+
+<anyUserPermission> :
+    "precedence" <SP+> <INTEGER>
+    | "protectedItems" <SP*> '{' <SP*> <protectedItem?> '}'
+    | "grantsAndDenials" <SP+> '{' <SP*> <grantAndDenial?> '}'
+
+<subtreeSpecificationComponent?> ::= <subtreeSpecificationComponent> <SP*>
+<subtreeSpecificationComponent*> | e
+<subtreeSpecificationComponent*> ::= ',' <SP*>
+<subtreeSpecificationComponent> <SP*> <subtreeSpecificationComponent*> | e
+
+<subtreeSpecificationComponent> :
+    "base" <SP+> <distinguishedName>
+    | "specificExclusions" <SP+> '{' <SP*> <specificExclusion?> '}'
+    | "minimum" <SP+> INTEGER
+    | "maximum" <SP+> INTEGER
+
+<specificExclusion?> ::= <specificExclusion> <SP*> <specificExclusion*> | e
+
+<specificExclusion*> ::= ',' <SP*> <specificExclusion> <SP*>
+<specificExclusion*> | e
+
+<specificExclusion> ::=
+              "chopBefore" <SP*> ':' <SP*> <distinguishedName> 
+              | 
+              "chopAfter" <SP*> ':' <SP*> <distinguishedName>
+
+<refinement> ::= 
+           "item" <SP*> ':' <SP*> <oid> 
+           | 
+           "and" <SP*> ':' <SP*> '{' <refinements?> '}'
+           | 
+           "or" <SP*> ':' <SP*> '{' <refinements?> '}'
+           | 
+           "not" <SP*> ':' <SP*> '{' <refinements?> '}'
+
+<refinements?> ::= <SP*> <refinements?> <SP*> <refinement*> | e
+
+<refinement*> ::= ',' <SP*> <refinement> <SP*> <refinement*> | e
+
+<distinguishedName> ::= SAFEUTF8STRING
+
+<oid> ::= DESCR | NUMERICOID
+
+SAFEUTF8CHAR :
+    '\u0001'..'\u0021' |
+    '\u0023'..'\u007F' |
+    '\u00c0'..'\u00d6' |
+    '\u00d8'..'\u00f6' |
+    '\u00f8'..'\u00ff' |
+    '\u0100'..'\u1fff' |
+    '\u3040'..'\u318f' |
+    '\u3300'..'\u337f' |
+    '\u3400'..'\u3d2d' |
+    '\u4e00'..'\u9fff' |
+    '\uf900'..'\ufaff' ;
+
+<SP+> ::= <SP> <SP*>
+<SP*> ::= <SP> <SP*> | e
+<SP> ::= ' ' | '\t' | '\n' | '\r' ;
+
+ALPHA : 'A'..'Z' | 'a'..'z' ;
+
+<INTEGER> ::= <DIGIT> | <LDIGIT> <DIGIT> <DIGIT*>
+<DIGIT> ::= '0' | <LDIGIT> ;
+<LDIGIT> ::= '1'..'9' ;
+<DIGIT*> ::= <DIGIT> <DIGIT*> | e
+
+HYPHEN : '-' ;
+
+NUMERICOID : INTEGER ( DOT INTEGER )+ ;
+
+DOT : '.' ;
+
+INTEGER_OR_NUMERICOID
+    :
+    ( INTEGER DOT ) => NUMERICOID
+    |
+    INTEGER
+
+SAFEUTF8STRING : '"'! ( SAFEUTF8CHAR )* '"'! ;
+
+DESCR 
+    :
+    ( "attributeValue" ( SP! )+ '{' ) =>
+      "attributeValue"! ( SP! )+ '{'! ( options : . )* '}'!
+    | ( "rangeOfValues" ( SP! )+ '(' ) =>
+      "rangeOfValues"! ( SP! )+ FILTER
+    | ALPHA ( ALPHA | DIGIT | HYPHEN )*
+    ;
+
+FILTER : '(' ( ( '&' (SP)* (FILTER)+ ) | ( '|' (SP)* (FILTER)+ ) | ( '!'
+(SP)* FILTER ) | FILTER_VALUE ) ')' (SP)* ;
+
+FILTER_VALUE : (options: ~( ')' | '(' | '&' | '|' | '!' ) ( ~(')') )* ) ;
+
+{newcode}
+
+
+
+                </div><!-- rightColumn -->
+                <div id="endContent"></div>
+            </div><!-- content -->
+            <div id="footer">&copy; 2003-2012, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+                Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+            </div>
+        </div><!-- container -->
+    </body>
+</html>
\ No newline at end of file

Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.11-links-and-references.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.11-links-and-references.html (added)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.11-links-and-references.html Wed Dec 19 04:46:47 2012
@@ -0,0 +1,129 @@
+<!DOCTYPE html>
+<!--
+    Licensed to the Apache Software Foundation (ASF) under one or more
+    contributor license agreements.  See the NOTICE file distributed with
+    this work for additional information regarding copyright ownership.
+    The ASF licenses this file to You under the Apache License, Version 2.0
+    (the "License"); you may not use this file except in compliance with
+    the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<html>
+	<head>
+		<title>4.5.11 Links and references &mdash; Apache Directory</title>
+		
+        <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+    	<link href="./../../css/green.css" rel="stylesheet" type="text/css">
+    
+	</head>
+	<body>
+	    <div id="container">
+            <div id="header">
+                <div id="subProjectsNavBar">
+                    <a href="./../../">
+                        
+                        Apache Directory Project
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../apacheds">
+                        
+                        <STRONG>ApacheDS</STRONG>
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../studio">
+                        
+                        Apache Directory Studio
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../api">
+                        
+                        Apache LDAP API
+                        
+                    </a>
+                </div><!-- subProjectsNavBar -->
+            </div><!-- header -->
+            <div id="content">
+                <div id="leftColumn">
+                    
+<div id="navigation">
+    
+    <h5>ApacheDS 2.0</h5>
+    <ul>
+        <li><a href="./../../apacheds/">Home</a></li>
+        <li><a href="./../../apacheds/features.html">Features</a></li>
+    </ul>
+    <h5>Downloads</h5>
+    <ul>
+        <li><a href="./../../apacheds/downloads.html">ApacheDS 2.0.0-M8</a>&nbsp;&nbsp;<img src="./../../images/new_badge.gif" alt="" style="margin- bottom:- 3px;" border="0"></li>
+        <li><a href="./../../apacheds/download-old-versions.html">Older versions</a></li>
+    </ul>
+    <h5>Documentation</h5>
+    <ul>
+        <li><a href="./../../apacheds/basic-users-guide.html">Basic User's Guide </a></li>
+        <li><a href="./../../apacheds/advanced-users-guide.html">Advanced User's Guide</a></li>
+        <li><a href="./../../apacheds/developers-guide.html">Developer's Guide</a></li>
+        <li><a href="./../../apacheds/configuration/ads-2.0-configuration.html">Configuration</a></li>
+            <!--li><a href="./../../apacheds/gen-docs/latest">Generated Reports (e.g. JavaDocs)</a></li-->
+    </ul>
+    
+    
+    <h5>Support</h5>
+    <ul>
+        <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists &amp; IRC</a></li>
+        <li><a href="./../../sources.html">Sources</a></li>
+        <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+        <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+    </ul>
+    <h5>Community</h5>
+    <ul>
+        <li><a href="./../../contribute.html">How to Contribute</a></li>
+        <li><a href="./../../team.html">Team</a></li>
+        <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+        <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+    </ul>
+    <h5>About Apache</h5>
+    <ul>
+        <li><a href="http://www.apache.org/">Apache</a></li>
+        <li><a href="http://www.apache.org/licenses/">License</a></li>
+        <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+        <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+        <li><a href="http://www.apache.org/security/">Security</a></li>
+    </ul>
+    
+</div><!-- navigation -->
+
+                </div><!-- leftColumn -->
+                <div id="rightColumn">
+
+
+
+<p>{scrollbar}</p>
+<p>The <em>Apache Directory Server</em> authorization system is based on the <em>X.500</em>
+specifications. Those documents are available on <a href="http://www.x500standard.com/index.php?n=Ig.LatestAvail">X.500 freely available specifications</a>
+, and more specifically [X.501|http://www.itu.int/rec/T-REC-X.501-200811-I!Cor2/dologin.asp?lang=e&amp;id=T-REC-X.501-200811-I!Cor2!PDF-E&amp;type=items]
+.</p>
+<p>Some more 'user friendly' documentation about Access Control can be found
+in <em>Chadwick</em>'s book, available at <a href="http://sec.cs.kent.ac.uk/x500book/">X.500 book</a>
+, chapter 8.</p>
+
+
+
+                </div><!-- rightColumn -->
+                <div id="endContent"></div>
+            </div><!-- content -->
+            <div id="footer">&copy; 2003-2012, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+                Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+            </div>
+        </div><!-- container -->
+    </body>
+</html>
\ No newline at end of file

Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.2-definitions.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.2-definitions.html (added)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.2-definitions.html Wed Dec 19 04:46:47 2012
@@ -0,0 +1,175 @@
+<!DOCTYPE html>
+<!--
+    Licensed to the Apache Software Foundation (ASF) under one or more
+    contributor license agreements.  See the NOTICE file distributed with
+    this work for additional information regarding copyright ownership.
+    The ASF licenses this file to You under the Apache License, Version 2.0
+    (the "License"); you may not use this file except in compliance with
+    the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<html>
+	<head>
+		<title>4.5.2 Definitions &mdash; Apache Directory</title>
+		
+        <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+    	<link href="./../../css/green.css" rel="stylesheet" type="text/css">
+    
+	</head>
+	<body>
+	    <div id="container">
+            <div id="header">
+                <div id="subProjectsNavBar">
+                    <a href="./../../">
+                        
+                        Apache Directory Project
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../apacheds">
+                        
+                        <STRONG>ApacheDS</STRONG>
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../studio">
+                        
+                        Apache Directory Studio
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../api">
+                        
+                        Apache LDAP API
+                        
+                    </a>
+                </div><!-- subProjectsNavBar -->
+            </div><!-- header -->
+            <div id="content">
+                <div id="leftColumn">
+                    
+<div id="navigation">
+    
+    <h5>ApacheDS 2.0</h5>
+    <ul>
+        <li><a href="./../../apacheds/">Home</a></li>
+        <li><a href="./../../apacheds/features.html">Features</a></li>
+    </ul>
+    <h5>Downloads</h5>
+    <ul>
+        <li><a href="./../../apacheds/downloads.html">ApacheDS 2.0.0-M8</a>&nbsp;&nbsp;<img src="./../../images/new_badge.gif" alt="" style="margin- bottom:- 3px;" border="0"></li>
+        <li><a href="./../../apacheds/download-old-versions.html">Older versions</a></li>
+    </ul>
+    <h5>Documentation</h5>
+    <ul>
+        <li><a href="./../../apacheds/basic-users-guide.html">Basic User's Guide </a></li>
+        <li><a href="./../../apacheds/advanced-users-guide.html">Advanced User's Guide</a></li>
+        <li><a href="./../../apacheds/developers-guide.html">Developer's Guide</a></li>
+        <li><a href="./../../apacheds/configuration/ads-2.0-configuration.html">Configuration</a></li>
+            <!--li><a href="./../../apacheds/gen-docs/latest">Generated Reports (e.g. JavaDocs)</a></li-->
+    </ul>
+    
+    
+    <h5>Support</h5>
+    <ul>
+        <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists &amp; IRC</a></li>
+        <li><a href="./../../sources.html">Sources</a></li>
+        <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+        <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+    </ul>
+    <h5>Community</h5>
+    <ul>
+        <li><a href="./../../contribute.html">How to Contribute</a></li>
+        <li><a href="./../../team.html">Team</a></li>
+        <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+        <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+    </ul>
+    <h5>About Apache</h5>
+    <ul>
+        <li><a href="http://www.apache.org/">Apache</a></li>
+        <li><a href="http://www.apache.org/licenses/">License</a></li>
+        <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+        <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+        <li><a href="http://www.apache.org/security/">Security</a></li>
+    </ul>
+    
+</div><!-- navigation -->
+
+                </div><!-- leftColumn -->
+                <div id="rightColumn">
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="4.5.1-introduction.html">4.5.1 - Introduction</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="4.5-authorization.html">4.5 - Authorization</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="4.5.3-enabling-access-control.html">4.5.3 Enabling Access Control</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+<p><em>ACI</em> :
+bq. Access Control Information. The set of all the information which might
+be relevant to an access control decision for a given subject.</p>
+<p><em>ACDF</em> :
+bq. Access Control Decision Function. It is the function used to decide
+whether a particular subject has a particular access right by virtue of
+applicable ACI items.</p>
+<p><em>protected item</em> :
+bq. A protected item is the element of directory information being
+accessed.  The protected items are entries, attributes, attribute values
+and distinguished names.  Access to each protected item can be separately
+controlled through ACI.</p>
+<p><em>subject</em> :
+bq. The entity acting on the server. It can be a person, a program, ... It
+aggregates the identity and the security related attributes (passwords,
+ceritifcates...) for this entity.</p>
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="4.5.1-introduction.html">4.5.1 - Introduction</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="4.5-authorization.html">4.5 - Authorization</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="4.5.3-enabling-access-control.html">4.5.3 Enabling Access Control</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+                </div><!-- rightColumn -->
+                <div id="endContent"></div>
+            </div><!-- content -->
+            <div id="footer">&copy; 2003-2012, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+                Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+            </div>
+        </div><!-- container -->
+    </body>
+</html>
\ No newline at end of file

Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.3-enabling-access-control.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.3-enabling-access-control.html (added)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.3-enabling-access-control.html Wed Dec 19 04:46:47 2012
@@ -0,0 +1,161 @@
+<!DOCTYPE html>
+<!--
+    Licensed to the Apache Software Foundation (ASF) under one or more
+    contributor license agreements.  See the NOTICE file distributed with
+    this work for additional information regarding copyright ownership.
+    The ASF licenses this file to You under the Apache License, Version 2.0
+    (the "License"); you may not use this file except in compliance with
+    the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<html>
+	<head>
+		<title>4.5.3 Enabling Access Control &mdash; Apache Directory</title>
+		
+        <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+    	<link href="./../../css/green.css" rel="stylesheet" type="text/css">
+    
+	</head>
+	<body>
+	    <div id="container">
+            <div id="header">
+                <div id="subProjectsNavBar">
+                    <a href="./../../">
+                        
+                        Apache Directory Project
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../apacheds">
+                        
+                        <STRONG>ApacheDS</STRONG>
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../studio">
+                        
+                        Apache Directory Studio
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../api">
+                        
+                        Apache LDAP API
+                        
+                    </a>
+                </div><!-- subProjectsNavBar -->
+            </div><!-- header -->
+            <div id="content">
+                <div id="leftColumn">
+                    
+<div id="navigation">
+    
+    <h5>ApacheDS 2.0</h5>
+    <ul>
+        <li><a href="./../../apacheds/">Home</a></li>
+        <li><a href="./../../apacheds/features.html">Features</a></li>
+    </ul>
+    <h5>Downloads</h5>
+    <ul>
+        <li><a href="./../../apacheds/downloads.html">ApacheDS 2.0.0-M8</a>&nbsp;&nbsp;<img src="./../../images/new_badge.gif" alt="" style="margin- bottom:- 3px;" border="0"></li>
+        <li><a href="./../../apacheds/download-old-versions.html">Older versions</a></li>
+    </ul>
+    <h5>Documentation</h5>
+    <ul>
+        <li><a href="./../../apacheds/basic-users-guide.html">Basic User's Guide </a></li>
+        <li><a href="./../../apacheds/advanced-users-guide.html">Advanced User's Guide</a></li>
+        <li><a href="./../../apacheds/developers-guide.html">Developer's Guide</a></li>
+        <li><a href="./../../apacheds/configuration/ads-2.0-configuration.html">Configuration</a></li>
+            <!--li><a href="./../../apacheds/gen-docs/latest">Generated Reports (e.g. JavaDocs)</a></li-->
+    </ul>
+    
+    
+    <h5>Support</h5>
+    <ul>
+        <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists &amp; IRC</a></li>
+        <li><a href="./../../sources.html">Sources</a></li>
+        <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+        <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+    </ul>
+    <h5>Community</h5>
+    <ul>
+        <li><a href="./../../contribute.html">How to Contribute</a></li>
+        <li><a href="./../../team.html">Team</a></li>
+        <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+        <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+    </ul>
+    <h5>About Apache</h5>
+    <ul>
+        <li><a href="http://www.apache.org/">Apache</a></li>
+        <li><a href="http://www.apache.org/licenses/">License</a></li>
+        <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+        <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+        <li><a href="http://www.apache.org/security/">Security</a></li>
+    </ul>
+    
+</div><!-- navigation -->
+
+                </div><!-- leftColumn -->
+                <div id="rightColumn">
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="4.5.2-definitions.html">4.5.2 - Definitions</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="4.5-authorization.html">4.5 - Authorization</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="4.5.4-aci-types.html">4.5.4 Aci Types</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+<p>Title: 4.5.3 Enabling Access Control
+{scrollbar}</p>
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="4.5.2-definitions.html">4.5.2 - Definitions</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="4.5-authorization.html">4.5 - Authorization</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="4.5.4-aci-types.html">4.5.4 Aci Types</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+                </div><!-- rightColumn -->
+                <div id="endContent"></div>
+            </div><!-- content -->
+            <div id="footer">&copy; 2003-2012, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+                Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+            </div>
+        </div><!-- container -->
+    </body>
+</html>
\ No newline at end of file

Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.4-aci-types.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.4-aci-types.html (added)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.4-aci-types.html Wed Dec 19 04:46:47 2012
@@ -0,0 +1,168 @@
+<!DOCTYPE html>
+<!--
+    Licensed to the Apache Software Foundation (ASF) under one or more
+    contributor license agreements.  See the NOTICE file distributed with
+    this work for additional information regarding copyright ownership.
+    The ASF licenses this file to You under the Apache License, Version 2.0
+    (the "License"); you may not use this file except in compliance with
+    the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<html>
+	<head>
+		<title>4.5.4 ACI types &mdash; Apache Directory</title>
+		
+        <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+    	<link href="./../../css/green.css" rel="stylesheet" type="text/css">
+    
+	</head>
+	<body>
+	    <div id="container">
+            <div id="header">
+                <div id="subProjectsNavBar">
+                    <a href="./../../">
+                        
+                        Apache Directory Project
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../apacheds">
+                        
+                        <STRONG>ApacheDS</STRONG>
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../studio">
+                        
+                        Apache Directory Studio
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../api">
+                        
+                        Apache LDAP API
+                        
+                    </a>
+                </div><!-- subProjectsNavBar -->
+            </div><!-- header -->
+            <div id="content">
+                <div id="leftColumn">
+                    
+<div id="navigation">
+    
+    <h5>ApacheDS 2.0</h5>
+    <ul>
+        <li><a href="./../../apacheds/">Home</a></li>
+        <li><a href="./../../apacheds/features.html">Features</a></li>
+    </ul>
+    <h5>Downloads</h5>
+    <ul>
+        <li><a href="./../../apacheds/downloads.html">ApacheDS 2.0.0-M8</a>&nbsp;&nbsp;<img src="./../../images/new_badge.gif" alt="" style="margin- bottom:- 3px;" border="0"></li>
+        <li><a href="./../../apacheds/download-old-versions.html">Older versions</a></li>
+    </ul>
+    <h5>Documentation</h5>
+    <ul>
+        <li><a href="./../../apacheds/basic-users-guide.html">Basic User's Guide </a></li>
+        <li><a href="./../../apacheds/advanced-users-guide.html">Advanced User's Guide</a></li>
+        <li><a href="./../../apacheds/developers-guide.html">Developer's Guide</a></li>
+        <li><a href="./../../apacheds/configuration/ads-2.0-configuration.html">Configuration</a></li>
+            <!--li><a href="./../../apacheds/gen-docs/latest">Generated Reports (e.g. JavaDocs)</a></li-->
+    </ul>
+    
+    
+    <h5>Support</h5>
+    <ul>
+        <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists &amp; IRC</a></li>
+        <li><a href="./../../sources.html">Sources</a></li>
+        <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+        <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+    </ul>
+    <h5>Community</h5>
+    <ul>
+        <li><a href="./../../contribute.html">How to Contribute</a></li>
+        <li><a href="./../../team.html">Team</a></li>
+        <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+        <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+    </ul>
+    <h5>About Apache</h5>
+    <ul>
+        <li><a href="http://www.apache.org/">Apache</a></li>
+        <li><a href="http://www.apache.org/licenses/">License</a></li>
+        <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+        <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+        <li><a href="http://www.apache.org/security/">Security</a></li>
+    </ul>
+    
+</div><!-- navigation -->
+
+                </div><!-- leftColumn -->
+                <div id="rightColumn">
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="4.5.3-enabling-access-control.html">4.5.3 - Enabling Access Control</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="4.5-authorization.html">4.5 - Authorization</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="4.5.5-aci-elements.html">4.5.5 Aci Elements</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+<p>Three different types of ACI exist. All types use the same specification
+syntax for an ACIITem. These types differ in their placement and manner of
+use within the directory.</p>
+<h2 id="chapter-content">Chapter content</h2>
+<ul>
+<li><a href="4.5.4.1-entryaci.html">4.5.4.1 - Entry Aci</a></li>
+<li><a href="4.5.4.2-prescriptiveaci.html">4.5.4.2 - Prescriptive Aci</a></li>
+<li><a href="4.5.4.3-subentryaci.html">4.5.4.3 - Subentry Aci</a></li>
+</ul>
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="4.5.3-enabling-access-control.html">4.5.3 - Enabling Access Control</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="4.5-authorization.html">4.5 - Authorization</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="4.5.5-aci-elements.html">4.5.5 Aci Elements</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+                </div><!-- rightColumn -->
+                <div id="endContent"></div>
+            </div><!-- content -->
+            <div id="footer">&copy; 2003-2012, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+                Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+            </div>
+        </div><!-- container -->
+    </body>
+</html>
\ No newline at end of file

Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.4.1-entryaci.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.4.1-entryaci.html (added)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.4.1-entryaci.html Wed Dec 19 04:46:47 2012
@@ -0,0 +1,171 @@
+<!DOCTYPE html>
+<!--
+    Licensed to the Apache Software Foundation (ASF) under one or more
+    contributor license agreements.  See the NOTICE file distributed with
+    this work for additional information regarding copyright ownership.
+    The ASF licenses this file to You under the Apache License, Version 2.0
+    (the "License"); you may not use this file except in compliance with
+    the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<html>
+	<head>
+		<title>4.5.4.1 EntryACI &mdash; Apache Directory</title>
+		
+        <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+    	<link href="./../../css/green.css" rel="stylesheet" type="text/css">
+    
+	</head>
+	<body>
+	    <div id="container">
+            <div id="header">
+                <div id="subProjectsNavBar">
+                    <a href="./../../">
+                        
+                        Apache Directory Project
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../apacheds">
+                        
+                        <STRONG>ApacheDS</STRONG>
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../studio">
+                        
+                        Apache Directory Studio
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../api">
+                        
+                        Apache LDAP API
+                        
+                    </a>
+                </div><!-- subProjectsNavBar -->
+            </div><!-- header -->
+            <div id="content">
+                <div id="leftColumn">
+                    
+<div id="navigation">
+    
+    <h5>ApacheDS 2.0</h5>
+    <ul>
+        <li><a href="./../../apacheds/">Home</a></li>
+        <li><a href="./../../apacheds/features.html">Features</a></li>
+    </ul>
+    <h5>Downloads</h5>
+    <ul>
+        <li><a href="./../../apacheds/downloads.html">ApacheDS 2.0.0-M8</a>&nbsp;&nbsp;<img src="./../../images/new_badge.gif" alt="" style="margin- bottom:- 3px;" border="0"></li>
+        <li><a href="./../../apacheds/download-old-versions.html">Older versions</a></li>
+    </ul>
+    <h5>Documentation</h5>
+    <ul>
+        <li><a href="./../../apacheds/basic-users-guide.html">Basic User's Guide </a></li>
+        <li><a href="./../../apacheds/advanced-users-guide.html">Advanced User's Guide</a></li>
+        <li><a href="./../../apacheds/developers-guide.html">Developer's Guide</a></li>
+        <li><a href="./../../apacheds/configuration/ads-2.0-configuration.html">Configuration</a></li>
+            <!--li><a href="./../../apacheds/gen-docs/latest">Generated Reports (e.g. JavaDocs)</a></li-->
+    </ul>
+    
+    
+    <h5>Support</h5>
+    <ul>
+        <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists &amp; IRC</a></li>
+        <li><a href="./../../sources.html">Sources</a></li>
+        <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+        <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+    </ul>
+    <h5>Community</h5>
+    <ul>
+        <li><a href="./../../contribute.html">How to Contribute</a></li>
+        <li><a href="./../../team.html">Team</a></li>
+        <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+        <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+    </ul>
+    <h5>About Apache</h5>
+    <ul>
+        <li><a href="http://www.apache.org/">Apache</a></li>
+        <li><a href="http://www.apache.org/licenses/">License</a></li>
+        <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+        <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+        <li><a href="http://www.apache.org/security/">Security</a></li>
+    </ul>
+    
+</div><!-- navigation -->
+
+                </div><!-- leftColumn -->
+                <div id="rightColumn">
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="4.5.4-aci-types.html">4.5.4 - Aci Types</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="4.5.4-aci-types.html">4.5.4 - Aci Types</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="4.5.4.2-prescriptiveaci.html">4.5.4.2 Prescriptive Aci</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+<p>Entry ACI are access controls added to entries to protect that entry
+specifically. Meaning the protected entry is the entry where the ACI
+resides. When performing an operation on an entry, ApacheDS checks for the
+presence of the multivalued operational attribute, <em>entryACI</em>. The values
+of the entryACI attribute contain ACIItems.</p>
+<p>{note}</p>
+<p>There is one exception to the rule of consulting entryACI attributes within
+ApacheDS: add operations do not consult the entryACI within the entry being
+added. This is a security precaution. (??? Check this sentence) If allowed
+users can arbitrarily add entries where they wanted by putting entryACI
+into the new entry being added. This could compromise the DSA. 
+{note}</p>
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="4.5.4-aci-types.html">4.5.4 - Aci Types</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="4.5.4-aci-types.html">4.5.4 - Aci Types</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="4.5.4.2-prescriptiveaci.html">4.5.4.2 Prescriptive Aci</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+                </div><!-- rightColumn -->
+                <div id="endContent"></div>
+            </div><!-- content -->
+            <div id="footer">&copy; 2003-2012, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+                Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+            </div>
+        </div><!-- container -->
+    </body>
+</html>
\ No newline at end of file

Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.4.2-prescriptiveaci.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.4.2-prescriptiveaci.html (added)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/4.5.4.2-prescriptiveaci.html Wed Dec 19 04:46:47 2012
@@ -0,0 +1,190 @@
+<!DOCTYPE html>
+<!--
+    Licensed to the Apache Software Foundation (ASF) under one or more
+    contributor license agreements.  See the NOTICE file distributed with
+    this work for additional information regarding copyright ownership.
+    The ASF licenses this file to You under the Apache License, Version 2.0
+    (the "License"); you may not use this file except in compliance with
+    the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<html>
+	<head>
+		<title>4.5.4.2 PrescriptiveACI &mdash; Apache Directory</title>
+		
+        <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+    	<link href="./../../css/green.css" rel="stylesheet" type="text/css">
+    
+	</head>
+	<body>
+	    <div id="container">
+            <div id="header">
+                <div id="subProjectsNavBar">
+                    <a href="./../../">
+                        
+                        Apache Directory Project
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../apacheds">
+                        
+                        <STRONG>ApacheDS</STRONG>
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../studio">
+                        
+                        Apache Directory Studio
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../api">
+                        
+                        Apache LDAP API
+                        
+                    </a>
+                </div><!-- subProjectsNavBar -->
+            </div><!-- header -->
+            <div id="content">
+                <div id="leftColumn">
+                    
+<div id="navigation">
+    
+    <h5>ApacheDS 2.0</h5>
+    <ul>
+        <li><a href="./../../apacheds/">Home</a></li>
+        <li><a href="./../../apacheds/features.html">Features</a></li>
+    </ul>
+    <h5>Downloads</h5>
+    <ul>
+        <li><a href="./../../apacheds/downloads.html">ApacheDS 2.0.0-M8</a>&nbsp;&nbsp;<img src="./../../images/new_badge.gif" alt="" style="margin- bottom:- 3px;" border="0"></li>
+        <li><a href="./../../apacheds/download-old-versions.html">Older versions</a></li>
+    </ul>
+    <h5>Documentation</h5>
+    <ul>
+        <li><a href="./../../apacheds/basic-users-guide.html">Basic User's Guide </a></li>
+        <li><a href="./../../apacheds/advanced-users-guide.html">Advanced User's Guide</a></li>
+        <li><a href="./../../apacheds/developers-guide.html">Developer's Guide</a></li>
+        <li><a href="./../../apacheds/configuration/ads-2.0-configuration.html">Configuration</a></li>
+            <!--li><a href="./../../apacheds/gen-docs/latest">Generated Reports (e.g. JavaDocs)</a></li-->
+    </ul>
+    
+    
+    <h5>Support</h5>
+    <ul>
+        <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists &amp; IRC</a></li>
+        <li><a href="./../../sources.html">Sources</a></li>
+        <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+        <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+    </ul>
+    <h5>Community</h5>
+    <ul>
+        <li><a href="./../../contribute.html">How to Contribute</a></li>
+        <li><a href="./../../team.html">Team</a></li>
+        <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+        <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+    </ul>
+    <h5>About Apache</h5>
+    <ul>
+        <li><a href="http://www.apache.org/">Apache</a></li>
+        <li><a href="http://www.apache.org/licenses/">License</a></li>
+        <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+        <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+        <li><a href="http://www.apache.org/security/">Security</a></li>
+    </ul>
+    
+</div><!-- navigation -->
+
+                </div><!-- leftColumn -->
+                <div id="rightColumn">
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="4.5.4.1-entryaci.html">4.5.4.1 - Entry Aci</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="4.5.4-aci-types.html">4.5.4 - Aci Types</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="4.5.4.3-subentryaci.html">4.5.4.3 Subentry Aci</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+<p>Prescriptive ACI are access controls that are applied to a collection of
+entries, not just to a single entry. Collections of entries are defined by
+the subtreeSpecifications of subentries. Hence prescriptive ACI are added
+to subentries as attributes and are applied by ApacheDS to the entries
+selected by the subentry's subtreeSpecification. ApacheDS uses the
+<em>prescriptiveACI</em> multivalued operational attribute within subentries to
+contain ACIItems that apply to the entry collection.</p>
+<p>Prescriptive ACI can save much effort when trying to control access to a
+collection of resources. Prescriptive ACI can even be specified to apply
+access controls to entries that do not yet exist within the DIT. They are a
+very powerful mechanism and for this reason they are the preferred
+mechanism for managing access to protected resources. ApacheDS is optimized
+specifically for managing access to collections of entries rather than
+point entries themselves.</p>
+<p>Users should try to avoid entry ACIs whenever possible, and use
+prescriptive ACIs instead. Entry ACIs are more for managing exceptional
+cases and should not be used excessively.</p>
+<p>{info:title=How it works!}
+For every type of LDAP operation, ApacheDS checks to see if any access
+control subentries include the protected entry in their collection. The set
+of subentries which include the protected entry are discovered very rapidly
+by the subentry subsystem. The subentry subsystem caches
+subtreeSpecifications for all subentries within the server so inclusion
+checks are fast. </p>
+<p>For each access control subentry in the set, ApacheDS checks within a
+prescriptive ACI cache for ACI tuples. ApacheDS also caches prescriptive
+ACI information in a special form called ACI tuples. This is done so
+ACIItem parsing and conversion to an optimal representations for evaluation
+is not required at access time. This way access based on prescriptive ACIs
+is determined very rapidly.
+{info}</p>
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="4.5.4.1-entryaci.html">4.5.4.1 - Entry Aci</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="4.5.4-aci-types.html">4.5.4 - Aci Types</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="4.5.4.3-subentryaci.html">4.5.4.3 Subentry Aci</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+                </div><!-- rightColumn -->
+                <div id="endContent"></div>
+            </div><!-- content -->
+            <div id="footer">&copy; 2003-2012, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+                Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+            </div>
+        </div><!-- container -->
+    </body>
+</html>
\ No newline at end of file



Mime
View raw message