Effective rights

The rights that an object can actually exercise to see or modify a particular directory, file, or object.

An object's effective rights to a directory, file, or object are calculated by NetWare each time that object attempts an action.

Effective rights to a file or directory are determined by

An object's trustee assignments to the directory, file, or other object

Inherited rights from an object's trustee assignments to parent directories

Trustee assignments of Group objects that a User object belongs to

Trustee assignments of objects listed in a User object's Security Equal To list

If a user has a trustee assignment to a directory on a given level in the directory structure and one on a higher level, the current trustee assignment overrides the one at the higher level.

Trustee assignments to a group, however, are added to individual user trustee assignments.

Effective rights to an object are shown in the following figure:

Figure 22
Effective Rights

In the figure, MWILKENS' effective rights to access the MANAGERS profile can come from

Trustee assignments to MANAGERS that list MWILKENS (rights are explicitly granted)

Trustee assignments to MANAGERS that list SALES PV (rights are inherited from the trustee's container)

Trustee assignments to SALES LA that list MWILKENS (rights are inherited from the object's container)
Rights must pass through MANAGERS' Inherited Rights Filter before becoming effective.

Trustee assignments to SALES LA that list SALES PV (inherited from object's container and trustee's container)
Rights must pass through MANAGERS' Inherited Rights Filter before becoming effective.

Trustee assignments to any Group object that MWILKENS is a member of (rights are only valid when the object requesting rights is a User object)

Trustee assignments to any object listed in MWILKENS' Security Equal To list (only valid when the object requesting rights is a User object)

If MWILKENS has a trustee assignment to SALES LA and to MANAGERS, the trustee assignment on MANAGERS overrides the trustee assignment on SALES LA.

No rights are granted by default. They must be granted by a trustee assignment at some point.

Related utilities: FILER , NETADMIN , and RIGHTS in Utilities Reference .