Making the File System Secure and Accessible

Understanding File and Directory Rights

File system security includes assigning trustee rights and setting file and directory attributes. These two types of security are discussed in the following sections.

Trustee Rights

Trustee rights determine the access users have to directories and files. These rights can be given to User objects, Group objects, or Organizational Role objects.

Trustee rights are explained in Table 11.

Table 11. Trustee Rights

Directory and File Attributes

Directory and file attributes assign properties to individual directories or files. Some attributes are meaningful only when applied at the file level, but some apply to both the directory and the file levels.

Be careful when assigning directory and file attributes. The attribute applies to all users.

For example, if you assign the Delete Inhibit attribute to a file, no one, including the owner of the file or the system supervisor, can delete the file. But any trustee with the Modify right can change the attribute to allow deletion.

Directory and file attributes are explained in Table 12.

Table 12. Directory and File Attributes

Adding a Trustee to a Directory or File

You can add a trustee to a directory or file using either the NetWare Administrator graphical utility or the FILER text utility. Both procedures are documented in this section.

Using NetWare Administrator to Add a Trustee

Prerequisites

• A 386 or 486 workstation running NetWare Administrator
• The Access Control right to the file or directory you want to add the trustee to

Procedure

1. Choose the NetWare Administrator icon from the MS Windows Program Manager.

2. Using the browser, select the directory or file that you want to add a trustee to.

   For information about moving around in the browser and selecting objects, choose Help from the menu bar.

3. From the Object menu, choose Details.

4. From the Identification page, choose Trustees of this Directory.

5. From the Trustees of this Directory page, choose Add Trustee.

6. Select a trustee from the list.

   If the object does not appear in the list, browse the Directory tree to find the object that you want to make a trustee of the file or directory.

7. Choose OK.

8. To grant rights to the trustee, mark the appropriate check boxes below the trustee.

9. To return to the browser, choose OK.

Additional Information

Using FILER to Add a Trustee

Prerequisites

• A workstation running DOS 3.30 or later
• A minimum of 512 KB of memory available in the workstation
• Access Control right to the file or directory you want to add the trustee to

Procedure

1. At the DOS prompt, type

   FILER <Enter>

   A list of available options appears.

   Your current context, Volume object, and path are shown in the upper left corner of the screen.

2. Select Manage Files and Directories.

   The Directory Contents list appears.

3. Find and select the file, directory, or subdirectory you want.

   • If the item you want appears on the list, select it and press <F10>.
   • If the item is not in the list, browse a directory or subdirectory by selecting it and pressing <Enter> until you see the item you want. Select it and press <F10>.
   • If you can't find the directory you want, check the Volume object name in the upper left corner of the screen. If you are in the wrong volume, you can change it by returning to the Available Options menu and choosing Select Current Directory.

4. Select View/Set File [or Directory] Information and press <Enter>.

   Information for that file or directory appears.

5. Use the arrow keys to move to the Trustees field, and then press <Enter>.

   A list of trustees for that file or directory appears.

6. To add a trustee, press <Insert> and locate the trustee's name in the list. Select the name and then press <Enter>.

   The new trustee, object type, and default rights appear in the list.

7. (Optional) To add another trustee to this file or directory, press <Esc> until you get to the File Information screen. Then repeat Steps 5 and 6.

8. (Optional) Assign rights to the new trustee.

   You can assign or modify trustee rights now, or at any time after the trustee has been assigned to the directory or file.

   1. From the trustee list, select the user you want to assign or modify rights for, and then press <Enter>.

      The Trustee Rights list appears, showing the rights the trustee currently has to this directory or file.

   2. Press <Insert> to see a list of rights you can assign.

   3. Select a right you want to give the trustee and press <Enter>. To give the trustee more than one right, press <F5> to mark each right, and then press <Enter>.

      The Trustee Rights list reappears with the new rights added.

   4. Press <Esc>.

      The new rights appear next to the trustee name.

9. Exit FILER by pressing <Esc> until you reach the Exit confirmation box, and then select Yes.

Additional Information

Deleting a Trustee from a Directory or File

You can delete a trustee from a directory or file using either the NetWare Administrator graphical utility or the FILER text utility. Both procedures are documented in this section.

Using NetWare Administrator to Delete a Trustee

Prerequisites

• A 386 or 486 workstation running NetWare Administrator
• The Access Control right to the file or directory you want to delete the trustee from

Procedure

1. Choose the NetWare Administrator icon from the MS Windows Program Manager.

2. Using the browser, select a directory or file that you want to delete a trustee from.

   For information on moving around in the browser and selecting objects, choose Help from the menu bar.

3. From the Object menu, choose Details.

4. From the Identification page, choose Trustees of This Directory.

5. From the Trustees list, select a trustee.

6. Choose Delete Trustee.

7. To delete that object as a trustee, choose Yes.

8. To return to the browser, choose OK.

Additional Information

Using FILER to Delete a Trustee

Prerequisites

• A workstation running DOS 3.30 or later
• A minimum of 512 KB of memory available on the workstation
• The Access Control right to the file or directory you want to delete the trustee from

Procedure

1. At the DOS prompt, type

   FILER <Enter>

   A list of available options appears.

   Your current context, Volume object, and path are shown in the upper left corner of the screen.

2. Select Manage Files and Directories.

   The Directory Contents list appears.

3. Find and select the file, directory, or subdirectory you want.

   • If the item you want appears on the list, select it and press <F10>.
   • If the item is not on the list, browse a directory or subdirectory by selecting it and pressing <Enter> until you see the item you want. Select it and press <F10>.

     If you can't find what you want, check the Volume object name in the upper left corner of the screen. If you are in the wrong volume, you can change it by returning to the Available Options menu and choosing Select Current Directory.

4. Select View/Set File [or Directory] Information and press <Enter>.

   Information for that file or directory appears.

5. Use the arrow keys to move to the Trustees field, and then press <Enter>.

   A list of trustees for that file or directory appear.

6. Select the trustee you want to delete, and then press <Delete>.

   You are prompted to delete that trustee from the directory.

7. Select Yes.

8. To exit, press <Esc> until the menu you want appears.

Additional Information

Modifying a Trustee's Rights to a Directory or File

You can modify trustee rights to a directory or file through the NetWare Administrator graphical utility or the FILER text utility. Both procedures are documented in this section.

Using NetWare Administrator to Modify a Trustee's Rights

Prerequisites

• A 386 or 486 workstation running NetWare Administrator
• The Access Control right to the file or directory for which you want to change the trustee's rights

Procedure

1. Choose the NetWare Administrator icon from the MS Windows Program Manager.

2. Using the browser, select the directory or file for which you want to change trustee rights.

   For information on moving around in the browser and selecting objects, choose Help from the menu bar.

3. From the Object menu, choose Details.

4. From the Identification page, choose Trustees of this Directory.

5. From the Trustees list, select a trustee.

6. Grant or revoke rights by marking the check boxes below the trustee.

7. Choose OK to save the trustee rights.

Additional Information

Using FILER to Modify a Trustee's Rights

Prerequisites

• A workstation running DOS 3.30 or later
• A minimum of 512 KB of memory available in the workstation
• The Access Control right to the file or directory for which you want to change the trustee's rights

Procedure

1. At the DOS prompt, type

   FILER <Enter>

   A list of available options appears.

   Your current context, Volume object, and path are shown in the upper left corner of the screen.

2. Select Manage Files and Directories.

   The Directory Contents list appears.

3. Find and select the file, directory, or subdirectory you want.

   • If the item you want appears on the list, select it and press <F10>.
   • If the item is not on the list, browse a directory or subdirectory by selecting it and pressing <Enter> until you see the item you want. Select it and press <F10>.
   • If you cannot find the item you want, check the Volume object name in the upper left corner of the screen. If you are in the wrong volume, you can change it by backing out to the Available Options menu and choosing Select Current Directory.

4. Select View/Set File [or Directory] Information and press <Enter>.

5. Using the arrow keys, move to the Trustee field, and then press <Enter>.

6. Select the name of the trustee whose rights you want to modify and press <Enter>.

   A list of the trustee's current rights appears.

7. Press <Insert> to see a list of rights you can assign.

8. Select a right you want to give the trustee, and then press <Enter>. If you want to assign more than one right, press <F5> to mark each right, and then press <Enter>.

   The Trustee Rights list reappears, showing the new list of rights.

9. To exit, press <Esc>.

   The new rights appear next to the trustee name.

Additional Information

Viewing/Modifying the Inherited Rights Filter for Directories and Files

You can view and modify the Inherited Rights Filter (IRF) for a directory or file using the NetWare Administrator graphical utility or the FILER text utility. Both procedures are documented in this section.

Using NetWare Administrator to View/Modify an Inherited Rights Filter

Prerequisites

• A 386 or 486 workstation running NetWare Administrator
• The Access Control right to the file or directory for which you want to view or modify the IRF

Procedure

1. Choose the NetWare Administrator icon from the MS Windows Program Manager.

2. Using the browser, select a directory or file.

   For information on moving around in the browser and selecting objects, choose Help from the menu bar.

3. From the Object menu, choose Details.

4. From the Identification page, choose Trustees of This Directory.

5. Under Inheritance Filter, select the check boxes for the rights that you want to allow to be inherited for that directory or file.

6. Choose OK.

   The Trustees dialog reappears.

7. To return to the browser, choose OK.

Additional Information

Using FILER to View/Modify the Inherited Rights Filter

Prerequisites

• A workstation running 3.30 or later
• A minimum of 512 KB of memory available on the workstation
• The Access Control right to the file or directory for which you want to view or modify the filter

Procedure

1. At the DOS prompt, type

   FILER <Enter>

   A list of available options appears.

   Your current context, Volume object, and path are shown in the upper left corner of the screen.

2. Select Manage Files and Directories.

   The Directory Contents list appears.

3. Find and select the file, directory, or subdirectory you want.

   • If the item you want appears on the list, select it and press <F10>.
   • If the item is not on the list, browse a directory or subdirectory by selecting it and then pressing <Enter> until you see the item you want. Select it and press <F10>.
   • If you can't find the item you want, check the Volume object name in the upper left corner of the screen. If you are in the wrong volume, you can change it by returning to the Available Options menu and choosing Select Current Directory.

4. Select View/Set File [or Directory] Information and press <Enter>.

   Information for that file or directory appears. The current inherited rights are shown in the Inherited Rights Filter field.

5. Use the arrow keys to move to the Inherited Rights Filter field and then press <Enter>.

   A list of the rights inherited by the file or directory appears.

6. Select a file or directory attribute you want to revoke, and then press <Delete>. To revoke more than one attribute, press <F5> to mark each attribute, and then press <Delete>.

7. Press <Esc>.

   The File [or Directory] Information screen reappears with a listing of the rights that can be inherited.

8. To exit, press <Esc> until the menu you want appears.

Additional Information

Changing Attributes of a Directory or File

You can change the attributes of a directory or file with the NetWare Administrator graphical utility or the FILER text utility. Both procedures are documented in this section.

Using NetWare Administrator to Change Attributes

Prerequisites

• A 386 or 486 workstation running NetWare Administrator
• The Modify right to the file or directory whose attributes you want to change

Procedure

1. Choose the NetWare Administrator icon from the MS Windows Program Manager.

2. Using the browser, select a directory or file.

   For information on moving around in the browser and selecting objects, choose Help from the menu bar.

3. From the Object menu, choose Details.

4. From the Identification page, choose Attributes.

5. Select the check boxes for the attributes that you want to set or reset for this directory or file.

6. To close the object dialog box and save the new attributes, choose OK.

Additional Information

Using FILER to Change Attributes

Prerequisites

• A workstation running DOS 3.30 or later
• A minimum of 512 KB of memory available on the workstation
• The Modify right to the file or directory whose attributes you want to change

Procedure

1. At the DOS prompt, type

   FILER <Enter>

   A list of available options appears.

   Your current context, Volume object, and path are shown in the upper left corner of the screen.

2. Select Manage Files and Directories.

   The Directory Contents list appears.

3. Find and select the file, directory, or subdirectory you want.

   • If the item you want appears on the list, select it and then press <F10>.
   • If the item is not on the list, browse a directory or subdirectory by selecting it and then pressing <Enter> until you see the item you want. Select it and press <F10>.
   • If you can't find what you want, check the volume object name in the upper left corner of the screen. If you are in the wrong volume, you can change it by returning to the Available Options menu and choosing Select Current Directory.

4. Select View/Set File [or Directory] Information and press <Enter>.

   Information for the file or directory appears.

5. To modify an attribute, use the arrow keys to move to the Attributes field, and then press <Enter>.

   The attributes for that file or directory appear.

6. Modify the attribute by completing one of the following steps:

   • To delete an attribute, select it and press <Delete>. Select Yes when you are prompted to delete the attribute.
   • To add an attribute, press <Insert>. Select the attribute you want to add and press <Enter>.

     To assign more than one right, press <F5> to mark each right, and then press <Enter>.

7. To exit, press <Esc> until the menu you want appears.

Additional Information

Changing the Owner of a Directory or File

You can change the owner of a directory or file using the NetWare Administrator graphical utility or the FILER text utility. Both procedures are documented in this section.

Using NetWare Administrator to Change the Owner

Prerequisites

• A 386 or 486 workstation running NetWare Administrator
• The Modify right to the file or directory for which you want to change the owner

Procedure

1. Choose the NetWare Administrator icon from the MS Windows Program Manager.

2. Using the browser, select the directory or file for which you want to change the owner.

   For information on moving around in the browser and selecting objects, choose Help from the menu bar.

3. From the Object menu, choose Details.

4. From the Identification page, choose Facts.

5. To change the owner of this file or directory, click on the browser button to the right of the Owner field.

6. Choose the object that you want to make the new owner of this directory or file.

7. When the correct user is displayed in the Object Name field, choose OK.

   The new owner appears in the Owner field of the object dialog box.

8. To save any changes, choose OK.

Additional Information

Using FILER to Change the Owner

Prerequisites

• A workstation running DOS 3.30 or later
• A minimum of 512 KB of memory available on the workstation
• The Modify right to the file or directory for which you want to change the owner

Procedure

1. At the DOS prompt, type

   FILER <Enter>

   A list of available options appears.Your current context, Volume object, and path are shown in the upper left corner of the screen.

2. Select Manage Files and Directories.

   The Directory Contents menu appears.

3. Find and select the file, directory, or subdirectory you want.

   • If the item you want appears on the list, select it and then press <F10>.
   • If the item is not on the list, browse a directory or subdirectory by selecting it and then pressing <Enter> until you see the item you want. Select it and press <F10>.
   • If you can't find what you want, check the Volume object name in the upper left corner of the screen. If you are in the wrong volume, you can change it by returning to the Available Options menu and choosing Select Current Directory.

4. Select View/Set File [or Directory] Information and press <Enter>.

   Information for the file or directory appears. The current owner of the file or directory appears in the Owner field.

5. Use the arrow keys to move to the Owner field and then press <Enter>.

6. Select the user that you want to be the owner of the file or directory and press <Enter>.

   NOTE:  (For directories only) You can apply the change of ownership to either the entire subdirectory structure or to a selected directory.

7. To exit, press <Esc> until the menu you want appears.

Additional Information