您可以对每个授权控制的大楼使用单个acl实现此规则，并授予ACL中的用户和组“进入”权限。
You can implement this rule with a single ACL on each authorization-controlled building, granting users and groups in the ACL the ENTER permission.
应用程序使用的规则可由具备适当权限的任何用户更改，而不必更改甚至重新编译应用程序。
The rules used by an application can be changed by anyone with permission, without changing or even recompiling the application.
第一个规则指定，只要用户 xray 是组 chatt 的成员，就允许他读和写，这会覆盖基本权限。
The first rule specifies that user xray will override the base permissions for read and write access, as long as he is a member of the group chatt.
应用推荐