+-------+-------+--------+-------------------------+
| | | | ORDER: |
+-------+-------+--------+------------+------------+
| | user | action | deny allow | allow deny |
+-------+-------+--------+------------+------------+
| deny | match | match | DENY | DENY |
| deny | match | ALL | DENY | DENY? |
| deny | ALL | match | DENY | ALLOW |
| deny | ALL | ALL | ---- | ALLOW |
| allow | match | match | ALLOW | ALLOW |
| allow | match | ALL | ALLOW? | ALLOW |
| allow | ALL | match | DENY | ALLOW |
| allow | ALL | ALL | DENY | ---- |
+-------+-------+--------+------------+------------+
---- -- not considered
ALLOW -- allow immediatly
ALLOW? -- allow if doesn't exist 'deny ALL action'
DENY -- deny immediatly
DENY? -- deny if doesn't exist 'allow ALL action'
Platon Group <platon@platon.sk> http://platon.sk/
|