求救，Sun ONE 的ACL如何控制？

[dingcx]

最近需要在Sun ONE Application Server 7.0中应用 ACL 实现如下功能：

普通公网用户可以访问除了/pic 和 /pic2 之外的全部资源；
/pic /pic2 只允许内部IP: 192.168.1.10 ~ 13的用户访问；
即，公网用户打入http://x.x.x.x/pic 或 /pic2 是不允许被访问的，其它无限，谢谢
我的ACL是这样的：
# cat generated.server1.acl
version 3.0;
acl "default";
authenticate (user,group) {
prompt="Sun ONE Application Server";
};
allow (read,execute,list,info)
user = "anyone";
allow (write,delete)
user = "all";
acl "url=/amethyst_pp/";
deny (all)
user = "anyone";
deny (all)
user = "all";
allow (all)
ip = "192.168.1.90";
allow (all)
ip = "192.168.1.91";
allow (all)
ip = "192.168.1.92";
allow (all)
ip = "192.168.1.93";
acl "url=/amethyst_pp2/";
authenticate (user,group) {
method = "basic";
};
deny (all)
(user = "anyone");

deny (all)
(user = "all");

allow (all)
(user = "all") and
(ip = "192.168.1.90");

allow (all)
(user = "all") and
(ip = "192.168.1.91");

allow (all)
(user = "all") and
(ip = "192.168.1.92");

allow (all)
(user = "all") and
(ip = "192.168.1.93");

但无论如何都不生效
当然，在管理界面中，HTTP服务器-->虚拟服务器-->server1中已将ACL勾选，谢谢大家的帮助！