ACL on VersionSeries and VersionDescriptions

Question

We have code that programmatically does a
"Make Versioned" operation on a document by creating a FamilyDefinition, VersionSeriesDefinition, and VersionDescriptionDefinition and tieing
all these classes together and to the Document.
However, while we are finding that the ACL on the Document reflects the user's default ACL for new objects, the ACL on the VersionSeries and on the VersionDescription do not. This is a problem if one user tries to check out an object that had the "Make Versioned" operation done by someone else.
Do we have to do something explicitly so these objects also get the correct ACL? How should we be implementign this function?
Patti

Answer 1

Hello Mahesh,
I am not sure I get the question...
But if you have an Inside FTP server which you will protect from the outside users and you want to restrict access to it,
You could use the ACL on the outside interface of the ASA,
Let's say you are running 8.4
The server IP address is 192.168.10.2
You will use the interface IP address to NAT the server
And you will only allow access from 4.2.2.2 to that server on the FTP service
so the Config would be something like this:
Object network FTP_Server
host 192.168.10.2
object service FTP
service source eq 21
nat (inside,outside) source static FTP_Server interface service FTP FTP
Now the ACL, to make it restrictive
access-list out_in permit tcp host 4.2.2.2 host 192.168.10.2 eq 21
access-group out_in in interface outside
Regards,
Julio