User Guide

Administering Rights 49
ConsoleOne User Guide
104-001316-001
August 29, 2001
Novell Confidential
Manual 99a38 July 17, 2001
4 Administering Rights
Rights are system flags that you can set on individual network resources to
control access to those resources. When you assign rights, you always link
them with a specific user, group, or other Novell
®
eDirectory
TM
object that is
the trustee (possessor) of the rights. In ConsoleOne
TM
, you can grant a trustee
rights to two different kinds of resources:
 eDirectory objects
Rights to these resources are stored in and applied by eDirectory. For
details, see Novell eDirectory Administration Guide > eDirectory Rights.
 Files and folders on NetWare
®
volumes
Rights to these resources are stored in and applied by the NetWare file
system. For details, see “About NetWare Rights” on page 58.
When a user tries to access a resource, the system (eDirectory or NetWare)
calculates the user’s effective rights to that resource. In doing so, the system
checks not only the user’s explicit rights assignments but also any security
equivalences held by the user and any filters that block the inheritance of
explicit rights assignments. This chapter explains how to perform the tasks
that control users’ effective rights to resources.
In This Chapter
 “Assigning Rights Explicitly” on page 50
 “Granting Equivalence” on page 53
 “Blocking Inheritance” on page 55
 “Viewing Effective Rights” on page 56
 “About NetWare Rights” on page 58