Adding Masks

Masks in ACLs establish maximum permissions that can then be applied to individual ACL entries. You can add two types of masks to an ACL: unauthenticated and general.

The unauthenticated mask restricts the permissions granted to all unauthenticated users. Permissions granted to an unauthenticated user by an ACL entry are filtered through the permissions specified with the unauthenticated mask; only those permissions found in both the entries that apply to the requesting user and the unauthenticated mask are granted.

The general mask restricts permissions granted to all entry types except the object's owner and the home cell types.

For more information about masks, see ACL Mask Entries.

$image\acl_0046_wmf.gif$ To add an unauthenticated mask:

1. Pull down the Add Entries menu and select Add Unauthenticated Mask ...

The Add Unauthenticated Mask dialog box appears.

2. Click the permissions you want to grant.

To grant multiple permissions, click the permissions you want in the Permissions box. A checkmark appears next to each selected permission. To deselect a permission, click the selected permissions.

For information on what each permission means, click the $image\acl_0047.gif$ button.

3. When you are satisfied with how the permissions are set, click OK.

The dialog box is dismissed and a box appears in the main ACL window showing the permissions you granted for Unauthenticated Mask. Notice that the $image\acl_0048.gif$ icon appears next to the entry to indicate that this is a mask entry.

$image\acl_0049_wmf.gif$ To add a general mask:

1. Pull down the Add Entries menu, choose Add General Mask ....

The Add General Mask dialog box appears.

2. Click the permissions you want to grant.

To grant multiple permissions, click the permissions you want in the Permissions box. A checkmark appears next to each selected permission. To deselect a permission, click the selected permissions.

For information on what each permission means, click the $image\acl_0050.gif$ button.

3. When you are satisfied with how the permissions are set, click OK.

The dialog box is dismissed and a box appears in the main ACL window showing the permissions you granted for General Mask. Notice that the $image\acl_0051.gif$ icon appears next to the entry to indicate that this is a mask entry.