HP BB118BV - StorageWorks Data Protector Express Package, User Manual, Page: 63 / 365

Chapter 4: Permissions 45
When determining the effective permissions a user has to anything stored in the folder, Data Protector
Express first looks to see if a user has direct permission to the object. If no users or groups have direct
permissions to the object, Data Protector Express checks to see if the user has direct permissions to the
folder. In this example, Data Protector Express checks to see if User One has direct permissions to
My
Media Folder ; because User One has direct permissions to this folder, Data Protector Express uses this
information to calculate his effective permissions to anything contained in the folder.
Similarly, Data Protector Express determines the effective permissions a user has to a folder by the direct
permissions he or she has to that folder. Note that when determining the effective permissions to a folder,
it makes no difference that a user also has effective permissions to the folder
which contains this folder.
When determining the effective permissions a user has to a job contained in his or her personal folder,
Data Protector Express checks to see if the user has direct permissions to the job. If he does not, Data
Protector Express checks to see if the user has direct permissions to the folder that contains the job. If a
user has direct permissions to the folder, Data Protector Express uses these direct permissions to
determine his effective permissions to the job
that is stored in the folder.
Note especially that the effective permissions a user has to a job or task are determined ONLY by the
user's effective permissions to the
folder
—and NOT by his effective permissions to the group folder.
How moving objects affects permissions
When an object is moved from one container to another, Data Protector Express determines the effective
permissions of the object based on its new location.
For example, suppose a user has effective permissions to a job because that job is stored in his or her
User/Group folder, a container to which the user has been granted direct permission. If the job is moved
from that folder to a new folder, the user’s effective permissions to the job may change. If the job were
moved to the
Admin
folder, the user would lose permission to it because he or she does not have direct