Novell EDIRECTORY 8.8 - GUIDE, Manual, Page: 66 / 574

66 Novell eDirectory 8.8 Administration Guide
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
can block such inheritance on individual subordinate items so that the rights aren’t effective on those
items, no matter who the trustee is. One exception is that the Supervisor right can’t be blocked in the
NetWare file system.
1 In Novell iManager, click the Roles and Tasks button
2 Click Rights > Modify Inherited Rights Filter .
3 Specify the name and context of the object whose inherited rights filter you want to modify,
then click
OK .
This displays a list of the inherited rights filters that have already been set on the object.
4 On the property page, edit the list of inherited rights filters as needed.
To edit the list of filters, you must have the Supervisor or Access Control right to the ACL
property of the object. You can set filters that block inherited rights to the object as a whole, to
all the properties of the object, and to individual properties.
NOTE: These filters won't block rights that are explicitly granted a trustee on this object,
because such rights aren't inherited.
5
Click OK .
Viewing Effective Rights to an eDirectory Object or Property
Effective rights are the actual rights users can exercise on specific network resources. They are
calculated by eDirectory based on explicit rights assignments, inheritance, and security equivalence.
You can query the system to determine a user’s effective rights to any resource.
1 In Novell iManager, click the Roles and Tasks button
2 Click Rights > View Effective Rights .
3
Enter the name and context of the trustee whose effective rights you want to view, then click
OK .
4 Choose from the following options:
Option Description
Property Name Lists the properties that the trustee has effective rights to. The
properties are read from eDirectory and so are always shown in
English. Each item in the list is one of the following types:
[All Attributes Rights]-Represents all the properties of the object.
[Entry Rights]-Represents the object as a whole. Rights to this
item don’t imply any property rights, except in the case of
Supervisor.
Specific properties-These are specific properties that the trustee
has rights to individually. By default, only properties of this object
class are listed (see below).
Effective Rights Shows the trustee’s effective rights to the selected property, as
calculated by eDirectory.