Oracle B12255-01 Manuale Utente

Resources Protected

Managing Security

Oracle HTTP Server authorizes and authenticates users before allowing them to
access, or modify resources on the server. Following are two classes of users that
access the server using Oracle HTTP Server, and their privileges.

■

Users that access the server without providing any authentication. They have
access to unprotected resources only.

■

Users that have been authenticated and potentially authorized by modules
within Oracle HTTP Server. This includes users authenticated by mod_auth
and mod_ossl. Such users have access to URLs defined in http.conf file.

Oracle HTTP Server is configured to protect resources such as:

■

Static content such as static HTML pages, graphics interchange format, .gif,
files, and other static files that Oracle HTTP Server provides directly.

■

CGI/FastCGI scripts, simple scripts or programs that Oracle HTTP Server
invokes directly.

■

Content generated by modules within Oracle HTTP Server. Modules such as

 generate responses that are returned to the client.