4.3 Blocking Inheritance

In eDirectory, rights assignments on containers can be inheritable or non-inheritable. In the NetWare file system, all rights assignments on folders are inheritable. In both eDirectory and NetWare, you can block such inheritance on individual subordinate items so that the rights aren’t effective on those items, no matter who the trustee is. One exception is that the Supervisor right can't be blocked in the NetWare file system.

In This Section

4.3.1 Blocking Inherited Rights to a File or Folder on a NetWare Volume

  1. Right-click the file or folder > click Properties.

  2. On the Inherited Rights Filter page, edit the filter as needed.

    To block a right, deselect its check box. To let a right flow through, select its check box. The Supervisor right can't be blocked. The other check boxes are disabled if you don’t have the Supervisor or Access Control right to the file or folder. For descriptions of the individual rights, see Section 4.5, About NetWare Rights.

    NOTE:This filter won't block rights that are explicitly granted a trustee on this file or folder, since such rights aren't inherited.

  3. Click OK.

4.3.2 Blocking Inherited Rights to an eDirectory Object or Property

  1. Right-click the eDirectory object > click Properties.

  2. On the NDS Rights tab, select the Inherited Rights Filters page.

    This displays a list of the inherited rights filters that have already been set on the object.

  3. On the property page, edit the list of inherited rights filters as needed.

    To edit the list of filters, you must have the Supervisor or Access Control right to the ACL property of the object. You can set filters that block inherited rights to the object as a whole, to all the properties of the object, and to individual properties. Click Help for details.

    NOTE:These filters won't block rights that are explicitly granted a trustee on this object, since such rights aren't inherited.

  4. Click OK.