NetWare Directory Services

2-17
Understanding NetWare Directory Services
The Hierarchical Directory Tree
For example, if you include a telephone number as a property for a User
object, you can prevent others from seeing the value associated with that
property–that is, the actual telephone number–by using an Inherited Rights
Filter to disable the Read right to that particular property (see “Inherited
Rights Filter” in this chapter). At the same time, you can still allow the
person to view other properties and their values, such as the user’s address.
The following table describes property rights you can assign to a trustee.
Table 2-3 Property Rights
Right Description
Add or Delete
Self
This right is included in the Write right; that is, if the
Write right is given, Add or Delete Self operations are
also allowed.
This right is only used for properties where your User
object can be listed as a value, such as group
membership lists or mailing lists.
Allows you to add or remove yourself as a value of the
property, but you cannot change any other values of the
property.
Compare Allows you to compare a value with the existing value of
the property. The comparison can return True or False,
but cannot give the value of the property.
Read Allows you to read the values of the property.
This right includes the Compare right; that is, if the Read
right is given, Compare operations are also allowed.
Supervisor Gives you all rights to the property. The Supervisor
property right can be blocked with an Inherited Rights
Filter. See “Inherited Rights Filter” in this chapter for
more information.