To vary user permissions across the content of your OSE-extended web, you can create a subweb of your existing web. A subweb inherits settings from its parent web, but you can change the user security settings of the subweb. In a subweb, you can give users browsing, authoring, and administrating permissions. To divide content into more independent units, you can create multiple Web sites. Each Web site must have a unique IP address and port pair.
Web sites can have unique security settings.
For the most detailed control of the content on your Web server, you can manually configure permissions for each file and folder. An ACL identifies the type of access each user has for a specific file and folder. Each Web site, virtual directory, folder, and file on your server can have its own list of client computer IP addresses and domain names that are granted or denied access. Use SSL when your clients are using Basic authentication, because Basic authentication sends user names and passwords between the client and server in an unencrypted and easily decoded format. To configure SSL, you must first obtain a security certificate for your server from a certificate authority .