Generate/VShellIcon.gif  Access Control Category


The Access Control category gives you the ability to allow or deny specific users access to your server .

The main window on the Access Control page lists the currently configured users and user groups. You can modify the list using the buttons described below.

Add Window User/Group...

Opens the Select User or Group dialog allowing you to add Windows users or groups to the VShell access control list.

Add User From Database...

Opens a dialog allowing you to add users from the VShell user database to the access control list.

Remove

Removes the selected user or group from the access control list.

Permissions group

This group displays the operational permissions for the user or group selected in the list above.

Upon initial installation, the Permissions options for the Everyone group (the VShell default group) are all checked in the Allow column, except for Remote Port Forwarding which is blank. When adding a new user (or group), the initial options for that user will all be blank.

If neither Allow nor Deny is checked for an option, then the selected user (or group) can be allowed that permission through membership in a group. If neither Allow nor Deny is checked for any group to which the user belongs, the user is implicitly not allowed the option.

An explicit denial of an option will take precedence over an explicit allowance. In other words, if Deny is checked for a user (or group) or for any group to which that user belongs, the user will be denied that permission even if they are explicitly allowed the permission as a member of another group.

Note: The following Permissions options cannot be left totally blank; at least one option must have a check in either the Allow or Deny column.

Logon

This option controls the selected user's ability to authenticate to VShell.

Shell

This option controls the selected user's access to the command shell.

Remote Execution

This option controls the selected user's ability to remotely execute programs such as alternate command shells.

SCP

This option controls the selected user's access to the SCP utility.

SFTP

This option controls the selected user's access to the SFTP subsystem.

Note: Users that are not explicitly allowed this option will not be able to transfer files.

Port Forwarding

This option controls the selected user's ability to access port forwarding.

Remote Port Forwarding

This option controls the selected user's ability to access remote port forwarding.

FTPS

This option controls the selected user's access to the FTPS service. This  feature is only available if the FTPS service is installed.