Date: 4 August 1997
Approved by Library Management Council: 6 August 1997

Policy:
Only Yale Library staff may have accounts on the Library Web Server (www.library.yale.edu).

Action:
As of 15 August 1997, new accounts on the Library Web Server will be created only for Yale Library staff. Existing non-Library staff accounts (e.g. student accounts) on the Library Web server will be continued until 1 September 1997. PCI and WW&DCS will train or arrange for training so that staff with responsibility for Web pages will know how to transfer files to the Web server. All necessary documentation will be made available through WAG (has been replaced by the Public Interfaces Committee) Web (http://www.library.yale.edu/wow/).

Rationale:
Since the library web server is the production machine that supports vital library services such as the Research Workstation, school and departmental web sites, and the LMC web site, providing for the security and dependability of the server and its contents is a necessary part of its operation. One way we provide such security and dependability is by locating the server in the "clean room" at ITS. Another way is by controlling who has accounts and access privileges on the server.

Since library staff are responsible and accountable for the Web pages they create and those pages they have others create for them, library staff need to have direct access to and control over those directories and files on the Library Web server that make up their Web pages. (In UNIX parlance, library staff need to "own" the files on the Library Web server for which they are responsible.)

Procedures:
When outsourcing html or web work, have the vendor create the web pages off-line or on a server to which the vendor has access. When the project is complete, the library staff person who is responsible for the web pages can ftp the files to the library server.

Do not share your account and password. See the Yale ITS policy document Policies For Use of Information Technology Services Facilities for more information regarding security and user responsibilities. While this document pertains to ITS facilities and not library facilities, it is an excellent source of information and guidance. Useful web links :
Using students for web work
Using Your Account on the Yale Library Web Server