Document access control – Google Search Appliance External Metadata Indexing Guide User Manual
Page 12
Google Search Appliance: External Metadata Indexing Guide
12
Each value has the form: meta-name=meta-value. Both the meta-name and the meta-value are encoded
according to section 2 of RFC3986 (
(commonly known as percent-
encoding). The search appliance does not transform ‘+’ to space.
The following restrictions apply to this header:
•
The meta-value cannot be empty.
•
The values for the meta-name and meta-value cannot contain embedded quotation marks.
Document Access Control
The search appliance provides document-level access control to secure the search content. When you
index external metadata, the search appliance applies the following access controls:
•
The access control of the external metadata in “Scenario 1” on page 6 and “Scenario 2” on page 7
(where the metadata is stored in a database) is the same as the access control for the associated
primary document.
•
The access control of the external metadata in “Scenario 3” on page 8 (where the metadata and the
primary document are stored in the database) is public, which means that it is available to all search
users. Scenario 3 is a bad option for data that needs to be secured.
•
The access control for external metadata in “Scenario 4” on page 9 and “Scenario 5” on page 11
(where the metadata is inserted into the feed XML file) is specified in the feed, just as with non-
metadata feeds.