Oracle B12255-01 - Manual (Page 133)

Resources Protected
Managing Security 8-3
Classes of Users and Their Privileges
Oracle HTTP Server authorizes and authenticates users before allowing them to
access, or modify resources on the server. Following are two classes of users that
access the server using Oracle HTTP Server, and their privileges.
■
Users that access the server without providing any authentication. They have
access to unprotected resources only.
■
Users that have been authenticated and potentially authorized by modules
within Oracle HTTP Server. This includes users authenticated by mod_auth
and mod_ossl. Such users have access to URLs defined in http.conf file.
Resources Protected
Oracle HTTP Server is configured to protect resources such as:
■
Static content such as static HTML pages, graphics interchange format, .gif,
files, and other static files that Oracle HTTP Server provides directly.
■
CGI/FastCGI scripts, simple scripts or programs that Oracle HTTP Server
invokes directly.
■
Content generated by modules within Oracle HTTP Server. Modules such as
mod_perl , mod_dms generate responses that are returned to the client.
See Also: "Authentication and Authorization Enforcement" on
page 8-4