NetWare 4.1/9000 Concepts

1-187
NetWare Glossary
S
Rights are granted to a specific directory, file, or NDS object by trustee
assignments. An object with a trustee assignment to a file, directory, or NDS
object is a trustee of that file, directory, or object.
Within each NDS object is an Access Control List (ACL) that defines who
has rights to the object. Files and directories contain similar information, but
not in the form of ACLs.
An NDS object's ACL defines what has rights to the object but does not
define what the object has rights to. For example, a printer object's ACL
defines which users have rights to the printer, but a user object's ACL does
not define which printers the user has rights to.
This differs from the file system. Rights to a file can be designated in the
user object. However, rights to a file can also be granted in the file itself.
There are four kinds of rights in NetWare:
• Directory rights. Control what a trustee can do with a directory. Directory rights
also apply to files in the directory if file rights aren’t granted and if the file’s
Inherited Rights Filter does not block the directory rights.
• File rights. Control what a trustee can do with a file.
• Object rights. Control what a trustee can do with an object. These rights control
the object as a single piece in the directory tree, but don’t allow access to
information stored within that object (unless the Supervisor object right is
granted).
• Property rights. Control a trustee’s access to information stored within the
object—that is, the information stored in the object’s properties. Each object has
several properties.
A default set of property rights can be granted to a trustee for all properties in the
object. Rights can also be granted that override the default property rights of that
trustee.
To grant directory or file rights to other objects, an object must have the
Access Control right to that directory or file. To grant object or property
rights, an object must have the Write right to the object’s ACL property.
For a list and description of all rights, see “Rights.”
Related utilities: “RIGHTS”; “NETADMIN”; “NetWare Administrator”
(Utilities Reference).