NetWare 4.1/9000 Concepts

1-189
NetWare Glossary
S
Be careful not to block everyone’s rights to an object with an Inherited
Rights Filter, leaving no one with access to part of the Directory tree.
The utilities don’t allow you to block the Supervisor object right unless a
trustee already has the Supervisor object right at that point. But you could
still delete the trustee object, making the trustee assignment invalid and
cutting off access to that part of the Directory tree.
Attributes security
Attributes (also called flags) describe the characteristics of a directory or file
and tell NetWare what actions are allowed, and in a few cases, what actions
have been performed. They aren’t used for objects.
NetWare reads the attributes the user sets (for example, Delete Inhibit) and
sets other attributes to show what has been done (for example, Archive
Needed).
Attributes are separate from rights. Attributes aren’t inherited, and if an
attribute indicates that a file can't be deleted, not even a network supervisor
can delete it without first changing the attribute.
To change the attributes of a directory or file, an object must be granted the
Modify right in a trustee assignment for the directory or file.
For a list of attributes, see “Attributes.”
Related utilities: “FLAG”; “FILER”; “NETADMIN”; “NetWare
Administrator” (Utilities Reference).
Effective rights security
Effective rights are the rights that a user actually has to a directory, file, or
NetWare Directory Services (NDS) object.
NetWare calculates your effective rights to a directory, file, or NDS object
whenever you initiate an action.
Effective rights to a file, directory, or NDS object are determined by
• An object’s trustee assignments to the directory or file.
• Inherited rights from an object’s trustee assignments to parent directory.
(Because trustee assignments in the current directory of file override inherited
rights from the parent directory, this only applies if the object does not have