The file "/etc/glite-wms/glite_wms_wmproxy.gacl" contains the identities (VO, user, etc) with distinct permissions (exec, read, write, ...) to use the WMS. If it is necessary to ban a user/group/VO the site admin must add his/her DN/FQAN and a deny tag, e.g.:

           <entry>
             <person>
               <dn>/C=IT/O=INFN/OU=Personal Certificate/L=DATAMAT DSAGRD/CN=John Doe</dn>
             </person>
             <deny>
               <exec/>
             </deny>
           </entry>