NetWare Directory Services

2-16
Understanding NetWare Directory Services
The Hierarchical Directory Tree
Property Rights To see the information in an object’s properties, trustees
must have the correct property rights. Property rights control access to each
property of an object.
Keep in mind the distinction between object rights and property rights.
While object rights control access to an object as an entity, property rights
control access to the information stored as an object’s property values. The
only exception is the Supervisor object right. The Supervisor object right
includes the Supervisor property right.
Property rights apply only to NDS object properties (and their values), not to
the objects themselves. NDS allows you flexibility in deciding what
property information others can access.
Table 2-2 Object Rights
Right Description
Supervisor Grants all rights to the object and to all its properties.
Browse Grants the right to see the object in the Directory tree.
Also allows a user performing a search to see the object
if it matches the search value. (This is true only when
comparing the base object class or Relative
Distinguished Name; otherwise, the Compare right is
required.)
Create Grants the right to create a new object within a container
object in the Directory tree. This right applies only to
container objects, because leaf objects cannot contain
other objects.
Delete The Write right for all existing object properties is also
needed to delete objects.
Grants the right to delete an object from the Directory
tree. However, a container object cannot be deleted
unless all the objects in the container are deleted first.
Rename Grants the right to change the Relative Distinguished
Name of the object, in effect changing the naming
property. This changes the object’s Distinguished Name.
See “Object Naming Rules” in this chapter..