NetWare 4.1/9000 Concepts

1-210

NetWare Glossary

Rights are granted to objects (making them trustees) by trustee assignments.

Trustee assignments are part of the directory, ﬁle, or object to which they

grant access.

Trustee assignments are stored in a trustee list. An object’s trustee list is

stored in the object’s ACL property. In NetWare Services a directory or ﬁle’s

trustee list is stored in the volume’s trustee database.

For example, to make group WRITERS a trustee of directory PROJECTS,

go to PROJECTS and make a trustee assignment with the name of group

WRITERS.

[Public] is a special trustee. [Public] can be speciﬁed as the trustee of any

ﬁle, directory, or object.

Anyone who tries to access a ﬁle, directory, or object without any other

rights is allowed the rights granted to the [Public] trustee.

Trustee assignments for objects and for directories and ﬁles are made in the

same way, but the rights granted by a trustee assignment are different for

objects and for directories and ﬁles.

Rights ﬂow down the tree structure for objects and for directories and ﬁles,

but rights from objects never affect directories and ﬁles, or vice versa.

Exception: a trustee of a Server object with the Supervisor right is

automatically granted the Supervisor right to the root directory of every

volume attached to that server.

When you make a trustee assignment to a directory, ﬁle, or object, the

trustee has access to the directory, its ﬁles, and its subdirectories (unless

rights are redeﬁned at the ﬁle or subdirectory level) or to the subordinate

objects. This is called inheritance.

Through inheritance, rights granted to a trustee ﬂow down through the

directory structure unless one of the following is true:

• Other trustee assignments are granted for the same object at a lower level of the

directory structure, or

• The Inherited Rights Filter of a subordinate object revokes rights granted in a

trustee assignment above that point.

An explicit trustee of a directory, ﬁle, or object is an object that has a trustee

assignment to that directory, ﬁle, or object.