Approaches to using the acl element, Example feed with an acl element – Google Search Appliance Feeds Protocol Developers Guide User Manual

Page 18

Advertising
background image

Google Search Appliance: Feeds Protocol Developer’s Guide

18

Approaches to Using the acl Element

There are two approaches to using the acl element:

As the child of a group element

As the child of a record element

If the acl element is the child of a group element, the url attribute is required. An acl element as the
child of a group element can be used in the following scenarios:

Updating the ACL of a record (independently of content) for a URL that was previously fed with
attached ACLs.

Modeling entities, such as folders, that would not otherwise be represented in the system.

If the acl element is the child of a record element, the url attribute is illegal. In this approach, the ACL
is immediately associated with the document.

Google does not recommend mixing the two approaches to using an acl element for a given URL in the
same feed.

Example Feed with an acl Element

The following code shows an example of a feed XML file with an acl element that inherits permissions.

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE gsafeed PUBLIC "-//Google//DTD GSA Feeds//EN" "gsafeed.dtd">
<gsafeed>
<header>

<datasource>TestUrlAcl</datasource>
<feedtype>incremental</feedtype>

</header>
<group …>
<acl url="http://dummyhost.corp.google.com/" inheritance-type=”child-overrides”

inherit-from="http://corp.google.com/">

<!-- spaces are stripped from principal text content -->

<principal scope="user" access="permit">edward</principal>
<principal scope="user" access="deny">william</principal>
<principal scope="user" access="deny">ben</principal>
<principal scope="group" access="permit">nobles</principal>
<!-- empty, will be skipped -->
<principal scope="group" access="permit">

</principal>

<principal scope="group" access="deny">playwrights</principal>

</acl>
<!-- Other acl elements or group elements with records can appear in any order in
this file -->
<record url='http://dummyhost.corp.google.com/'…>

Advertising