Security: Rights to Files and Directories

File system security includes assigning trustee rights. To set up rights, see the following:

For information on how to use Windows 95 to set rights, see Common Networking Tasks in Novell Client for Windows 95.

For Windows NT, see NetWare File Security in Novell Client for Windows NT.


Description of Directory and File Rights

Trustee rights determine the access users have to directories and files. These rights can be given to NDS object such as User objects, Group objects, Organizational Role objects, or container objects.

The following table contains a list and description of rights. For more information about rights, see the help in NetWare Administrator.


Table 1. Trustee Rights

Right Allows you to

Access Control

Add and remove trustees and change rights to directories and files.

Create

Create subdirectories and files.

Erase

Delete directories and files.

File Scan

View directory and file names in the file system structure.

Modify

Rename directories and files, and change file attributes.

Read

Open and read files, and open, read, and execute applications.

Supervisor

Grant and exercise all rights listed in this table.

Write

Open, write to, and modify a file.


Adding a Trustee to a Directory or File

You can add a trustee to a directory or file using NetWare Administrator or RIGHTS. The NetWare Administrator procedure is documented in this section. (See NetWare Administrator or RIGHTS for a general description of these utilities.)


Using NetWare Administrator to Add a Trustee


Prerequisites


Procedure

  1. In NetWare Administrator, select the directory or file that you want to add a trustee to.

    For information about moving around in the browser and selecting objects, choose Help from the menu bar.

  2. From the Object menu, choose Details.

  3. From the Identification page, choose Trustees of this Directory.

  4. From the Trustees of this Directory page, choose Add Trustee.

  5. Select a trustee from the list of available objects.

    If the object does not appear in the list, browse the Directory tree to find the object that you want to make a trustee of the directory or file.

  6. Choose OK.

  7. To grant rights to the trustee, check the appropriate checkboxes below the trustee.

  8. To return to the browser, choose OK.


Deleting a Trustee from a Directory or File

You can delete a trustee from a directory or file using NetWare Administrator or RIGHTS.EXE. The NetWare Administrator procedure is documented in this section. (See NetWare Administrator or RIGHTS for a general description of these utilities.)


Using NetWare Administrator to Delete a Trustee


Prerequisites


Procedure

  1. In NetWare Administrator, select a directory or file that you want to delete a trustee from.

    For information on moving around in the browser and selecting objects, choose Help from the menu bar.

  2. From the Object menu, choose Details.

  3. From the Identification page, choose Trustees of This Directory.

  4. From the Trustees list, select a trustee you want to delete.

  5. Choose Delete Trustee.

  6. To delete that object as a trustee, choose Yes.

  7. To return to the browser, choose OK.


Modifying a Trustee's Rights to a Directory or File

You can modify trustee rights to a directory or file through NetWare Administrator or RIGHTS.EXE. The NetWare Administrator procedure is documented in this section. (See NetWare Administrator or RIGHTS for a general description of these utilities.)


Using NetWare Administrator to Modify a Trustee's Rights


Prerequisites


Procedure

  1. In NetWare Administrator, select the directory or file for which you want to change trustee rights.

    For information on moving around in the browser and selecting objects, choose Help from the menu bar.

  2. From the Object menu, choose Details.

  3. From the Identification page, choose Trustees of this Directory.

  4. From the Trustees list, select a trustee.

  5. Grant or revoke rights by checking the checkboxes below the trustee.

  6. Choose OK to save the trustee rights.


Viewing/Modifying the Inherited Rights Filter for Directories and Files

You can view and modify the Inherited Rights Filter (IRF) for a directory or file using NetWare Administrator. Both procedures are documented in this section. (See NetWare Administrator for a general description of this utility.) For more information about IRFs, see the help in NetWare Administrator.


Prerequisites


Procedure

  1. In NetWare Administrator, select a directory or file.

    For information on moving around in the browser and selecting objects, choose Help from the menu bar.

  2. From the Object menu, choose Details.

  3. From the Identification page, choose Trustees of This Directory.

  4. Under Inheritance Filter, check the checkboxes for the rights that you want to allow to be inherited for that directory or file.

  5. Choose OK.

    The Trustees dialog reappears.

  6. To return to the browser, choose OK.