Supervising the Network

2-5
Setting Up and Managing NetWare Directory Services Objects
Rights Needed to Create and Manage Objects
NOTE: In addition to the rights mentioned previously, NetWare® 4.1/9000 has its own
security. The discussion of rights in this chapter is limited to those rights inherent to
NetWare Services. For information about how these two sets of security work
together see Chapter 3, “Managing the NetWare Services File System.”
Object Rights
Object rights control what trustees can do with the object of which they are a
trustee. Object rights control the object as a single piece in the Directory
tree, but do not allow the trustee to access information stored in that object’s
properties (unless the Supervisor object right is granted).
Table 2-1 lists and describes the object rights that you can assign to a trustee.
Table 2-1 Object Rights
Right Description
Supervisor Gives the network supervisor all rights to the object and to all
its properties. However, the Supervisor object right can be
blocked by the Inherited Rights Filter (IRF) below the object
where the Supervisor right is granted.
Browse Allows the trustee to see the object in the Directory tree. Also
when the trustee searches for a value that matches the object,
Browse allows that object to be listed.
Create Allows the trustee to create a new object within a container
object. Applies only to container objects because leaf objects
cannot contain other objects.
Delete Allows the trustee to delete an object from the Directory tree.
You cannot, however, delete a container object unless all the
objects in the container are deleted first.
Rename Allows the trustee to change the name of the object, in effect,
changing the naming property. This changes what the object is
called when it is a part of complete names.