Access to approved system resources on the iPlanet Portal Server is controlled by looking up the value of privileges that delineate specific rights and permissions, based on the profile attached to the user's domain, role, or user name. A subset of privilege values defines the policy attached to the profile for domains, roles, and users. The policy is implemented by interpreting the privilege values.
Boolean privileges have a value of either true or false.
List privileges have an Allow list and a Deny list. A Deny list has precedence over an Allow list. You configure these values in the Policy page of the Administration Console, which lists Policies of iPlanet Portal Server. This section describes how to configure policy at the domain, role, and user level. When configuring policy at the domain level, all roles and users that are children of the domain inherit the policy unless explicitly overridden.