Cal Poly Pomona Intranet
Administration--FL307: La civilisation française
A message board consists of a message directory that will contain posted message files, a threaded index file and an administration file. To browse the board or post a message, refer to the index file; to control access or prune messages, refer to the administration file. A public message board allows anyone on the Internet to post a message. A private message board requires an Intranet account to post a message.
This message board--FL307: La civilisation française:
The access control lists (ACLs) of the index file, administration file, message directory and message files determine who can browse the board, post a message or prune messages. The ACLs were initialized according to the default ACLs of the directory in which the message directory was created, so you will probably want to control access to meet your needs. In a public message board, the access required to post a message must be allowed by anyone on the Internet.
| prune: | requires read/write
|
| post: | requires read/write
|
| browse: | requires read
|
| prune: | requires read
|
| post: | requires no access
|
| browse: | requires no access
|
| prune: | requires write/search/insert/delete
|
| post: | requires write/search/insert
|
| browse: | requires search
|
| prune: | requires read/write
|
| post: | requires read/write
|
| browse: | requires read
|
Messages can be deleted from the message directory and erased from the index file by several criteria:
SECURITY WARNINGS
- Users allowed the access required to post a message have sufficient access to overwrite the index file and message files. Although the posting mechanism doesn't abuse the access, there is nothing to prevent those users from circumventing that mechanism. In a public message board, the access required to post a message must be allowed by anyone on the Internet; therefore, anyone on the Internet has sufficient access to destroy the index file and message files.
- Users allowed the access required to post a message have sufficient access to fill the message directory and exhaust the quota of the user or group directory in which the message board resides. In a public message board, access required to post a message must be allowed by anyone on the Internet; therefore, anyone on the Internet has sufficient access to fill the message directory and exhaust the quota.