$Id: README 937 2006-02-25 16:43:46Z brachman $

This directory contains default access control rules for standard DACS web
services and resources and a few common files to which access is ordinarily
granted to all (such as /favicon.ico and /robots.txt).  When DACS is installed,
the contents of this directory are copied from the DACS distribution to
${Conf::DACS_HOME}/acls - that location is determined when DACS is configured
(typically, it is /usr/local/dacs/acls).

The conf/site.conf-std file in the DACS distribution contains the following
directive that tells DACS where to look for these default rules:

VFS "[dacs_acls]dacs-fs:${Conf::DACS_HOME}/acls"

The site.conf-std file also contains the following directive that tells DACS
where to look for the jurisdiction-specific rules:

VFS "[acls]dacs-fs:${Conf::FEDERATIONS_ROOT}/${Conf::FEDERATION_DOMAIN}/${Conf::JURISDICTION_NAME}/acls"


                                NOTE

A default rule (from "dacs_acls") is only applied to a request if it matches
the request more closely than any jurisdiction-specific rule (from "acls").
You should not add any rules to the default set nor should you modify any of
them - they will be overwritten if you re-install DACS.  If you must modify
a default rule, make a copy of it where the jurisdiction-specific rules are
and edit that copy - it will override the default version.

