Inherited Rights Filter (IRF)

An Inherited Rights Filter (IRF) limits the inheritance of rights. When you create an IRF, you specify the rights which can be inherited from the parent object.

The NWAdmin screen you use to create an IRF is shown below.

Notice the check marks under Object rights next to Supervisor and Browse. These indicate that objects inherit the Supervisor and Browse rights assigned to container targets higher in the tree (but no other rights).

Notice also that under Property rights, no rights are selected to the Object Trustees (ACL) property. This indicates that no assignments to that property will be inherited from containers higher in the tree.

NWAdmin will not allow you to filter the Supervisor object right without granting that right explicitly. Such an IRF would cut off all management of the target object and all objects lower in the tree.



Previous | Next