4.10 Simple Effective Rights
Query
The following query illustrates how to obtain the read, write,
and compare rights of user Sjones on the attributes of user JDoe.
SQL Statement
SELECT "Object Name", "Trustee Name", "Attribute", "Compare", "Read", "Write"
FROM "Effective Rights"
WHERE "Object Name" = ’JDoe.Sales’ AND "Trustee Name" = ’SJones.Marketing’
Results Table
The query produces a table similar to the following. The zeros
in the rights columns mean FALSE (the trustee does not have this
right), and the ones TRUE (the trustee does have this right).
Table 4-9 Simple Effective Rights Query Result Report
|
JDoe.Sales |
SJones.Marketing |
[Entry Rights] |
0 |
0 |
0 |
|
JDoe.Sales |
SJones.Marketing |
[All Attributes Rights] |
0 |
0 |
0 |
|
JDoe.Sales |
SJones.Marketing |
ACL |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Back Link |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Bindery Property |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Cross Certificate Pair |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
CA Public Key |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
CN |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Description |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Facsimile Telephone Number |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Home Directory |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
L |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Login Allowed Time Map |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Login Disabled |
1 |
0 |
1 |
|
JDoe.Sales |
SJones.Marketing |
Login Expiration Time |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Login Grace Limit |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Login Grace Remaining |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Login Intruder Address |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Login Intruder Attempts |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Login Intruder Reset Time |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Login Maximum Simultaneous |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Login Script |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Login Time |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Minimum Account Balance |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
EMail Address |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Network Address |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Network Address Restriction |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Obituary |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Object Class |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
OU |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Password Allow Change |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Password Expiration Interval |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Password Expiration Time |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Password Minimum Length |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Password Required |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Password Unique Required |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Physical Delivery Office Name |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Postal Address |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Postal Code |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Postal Office Box |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Print Job Configuration |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Printer Control |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Profile |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Public Key |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Higher Privileges |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Security Equals |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
See Also |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
S |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
SA |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Surname |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Telephone Number |
1 |
1 |
0 |
|
JDoe.Sales |
SJones.Marketing |
Title |
1 |
1 |
0 |
|
... |
... |
... |
... |
... |
... |
This example table is not complete. The User class has over
90 attributes in a default NetWare 5 installation. Since the Effective
Rights table is returning rights to attributes, the query returns
results for all attributes defined for the class unless restricted
to a selected set. Also, the attributes come back in an unsorted
order, unless you include an order statement.