| 
<?php
 /*
 * This file defines "named" access control lists, which can
 * be reused in several places.
 */
 $config = array(
 
 'adminlist' => array(
 //array('allow', 'equals', 'mail', '[email protected]'),
 //array('allow', 'has', 'groups', 'admin'),
 /* The default action is to deny access. */
 ),
 
 'example-simple' => array(
 array('allow', 'equals', 'mail', '[email protected]'),
 array('allow', 'equals', 'mail', '[email protected]'),
 /* The default action is to deny access. */
 ),
 
 'example-deny-some' => array(
 array('deny', 'equals', 'mail', '[email protected]'),
 array('allow'), /* Allow everybody else. */
 ),
 
 'example-maildomain' => array(
 array('allow', 'equals-preg', 'mail', '/@example\.org$/'),
 /* The default action is to deny access. */
 ),
 
 'example-allow-employees' => array(
 array('allow', 'has', 'eduPersonAffiliation', 'employee'),
 /* The default action is to deny access. */
 ),
 
 'example-allow-employees-not-students' => array(
 array('deny', 'has', 'eduPersonAffiliation', 'student'),
 array('allow', 'has', 'eduPersonAffiliation', 'employee'),
 /* The default action is to deny access. */
 ),
 
 'example-deny-student-except-one' => array(
 array('deny', 'and',
 array('has', 'eduPersonAffiliation', 'student'),
 array('not', 'equals', 'mail', '[email protected]'),
 ),
 array('allow'),
 ),
 
 'example-allow-or' => array(
 array('allow', 'or',
 array('equals', 'eduPersonAffiliation', 'student', 'member'),
 array('equals', 'mail', '[email protected]'),
 ),
 ),
 
 'example-allow-all' => array(
 array('allow'),
 ),
 
 );
 |