Inherited Rights Filters

Use the Inherited Rights Filters page to view or set inherited rights filters (IRFs) on this object.

This field specifies the target resource that the IRFs shown on this page are blocking rights to.

The value is a distinguished name.
You cannot edit this field.
To see the IRFs on a different target resource, cancel the Properties dialog box and go to the desired target resource in the NDS* tree.

Use this section of the page to view or set the IRF that blocks object rights from being inherited to the target resource.

Use this section of the page to view or set IRFs that block property rights from being inherited to the target resource.

ConsoleOne* does not yet provide the capability to set specific property rights as inheritable, although other utilities such as NetWare* Administrator do.
One at a time, you can set IRFs that block rights to all properties of the target resource, to a subset of all properties, and/or to a single property.
To block rights to all properties, click the All Properties radio button, and then under Rights, uncheck the rights you want to block.
To block rights to a single property or to a set of properties,
1. Click the Selected Properties radio button.
2. From the list of properties, choose the property or set of properties that you want to block rights to.
  
  Use Ctrl-click to choose multiple properties.
3. Under Rights, uncheck the rights you want to block.
For information on any property in the Selected Properties list, look up the property in the index.
See Notes and Tips for other important information on blocking property rights.

The IRFs shown on this page are stored in the NDS database in the access control list (ACL) of the target resource.

The ACL is sometimes called the Object Trustees property.
Only inherited rights can be blocked by an IRF. Rights granted at the current level by explicit assignment cannot be blocked. See How Rights Work.
IRFs block inherited rights held by any and all trustees, whereas explicit rights assignments can deny rights on an individual trustee basis. See Notes and Tips (Controlling Access).
Blocking one right never implies that another right is blocked.

Note: This is not true for granting rights. In some cases, granting one right effectively implies other rights. See How Rights Work.
IRFs for object rights and property rights are separate entries in the ACL. Therefore, you can block object rights without affecting property rights and vice versa.
An object can have multiple property rights IRFs: one for all properties and several for selected properties. However, on this page you can only view and set such IRFs one at a time. See Property Rights.
In the Selected Properties list, properties for which an IRF currently exists are marked with a large check mark .
For help with the Properties dialog box in general, see Using Property Pages.