Setting up access controls

Based on decisions made by administrators and project managers, the MultiSite administrators at each site configure access control for their site.

About this task

The administrators and project managers at the Boston, San Francisco, and Tokyo sites make the following decisions:
  • Writers are allowed to request mastership of all branches in /vobs/doc, except for the branches v3.0.doc@@/main , schedule.doc@@/main, and roadmap.doc@@/main .
  • Writers are not allowed to request mastership of any branches of type boston_main, tokyo_main, or sanfran_main in /vobs/html.
  • Tool developers are allowed to request mastership of all branches of type main in /vobs/html.
Each administrator completes the following steps on the replica’s VOB server host. (This example takes place at the Boston site.)
  1. Add writers at other sites to the ACL for /vobs/doc.
    1. Place the following lines in the file /tmp/doc_acl: 
      # Replica boston_hub@/vobs/doc
# Request for Mastership ACL:
User:boston.purpledoc.com/msadm Full
User:tokyo.purpledoc.com/masako Change
User:tokyo.purpledoc.com/sato Change
User:tokyo.purpledoc.com/ito Change
User:sf.purpledoc/jcole Change
User:sf.purpledoc/marni Change
User:sf.purpledoc/david Change
    2. Use the file to set the replica’s ACL: 
      multitool reqmaster –acl –set /tmp/doc_acl vob:/vobs/doc
  2. Add tool developers at other sites to the ACL for /vobs/html.
    1. Place the following lines in the file /tmp/html_acl: 
      # Replica boston_hub@/vobs/html
# Request for Mastership ACL:
User:boston.purpledoc.com/ccadmin Full
User:tokyo.purpledoc.com/masako Change
User:sf.purpledoc/david Change
    2. Use the file to set the replica’s ACL: 
      multitool reqmaster –acl –set /tmp/html_acl vob:/vobs/html
      Note: After you set the ACL, you can delete the temporary ACL files you created.
  3. Deny mastership requests for specific branches and branch types: 
    multitool reqmaster –deny /vobs/doc/plans/v3.0.doc@@/main
/vobs/doc/plans/schedule.doc@@/main /vobs/doc/plans/roadmap.doc@@/main

    multitool reqmaster –deny –instances brtype:boston_main@/vobs/html

    multitool reqmaster –deny brtype:boston_main@/vobs/html
  4. Enable requests for mastership at the replica level. 
    multitool reqmaster –enable vob:/vobs/doc vob:/vobs/html