Search  

Access Control Policies

One can block inherited policies for all roles

<?xml version="1.0"?>

<policy xmlns="http://www.wyona.org/security/1.0" use-inherited-policies="false">

  <role id="view">
    <!--<world permission="false"/>-->
    <user id="lenya" permission="true"/>
  </role>

  <role id="open">
    <user id="lenya" permission="true"/>
  </role>

  <role id="write">
    <user id="lenya" permission="true"/>
  </role>

</policy>

or also for a particular role

<?xml version="1.0"?>

<policy xmlns="http://www.wyona.org/security/1.0">

  <role id="view" use-inherited-policies="false"
    <!--<world permission="false"/>-->
    <user id="lenya" permission="true"/>
  </role>

</policy>

---