Let's say john, michelle, and sarah are the usernames allotted to our administrators and 192.0.2.46, 192.0.2.9, and 192.0.2.182 are their respective IP addresses allotted to their laptops. In this case, we are allowing additional access when the requests are originating from the above IP addresses or if the requests are authenticated with the credentials of the aforementioned users. The required ACL lists should look similar to the following:
acl admin_laptops src 192.0.2.46 192.0.2.9 192.0.2.182 acl authenticated proxy_auth REQUIRED acl admin_user proxy_auth john michelle sarah acl work_related_websites dstdomain "/opt/squid/etc/work_websites"
Now, we need to allow everyone to access only work related websites, except administrators who should be able to access everything. Therefore, we should build the following access rules:
http_access allow admin_laptops http_access allow admin_user http_access allow localnet work_related_websites authenticated...