HP BB118BV - StorageWorks Data Protector Express Package, Руководство пользователя, Страница: 202 / 365

184 Data Protector Express User's Guide and Technical Reference
•
Does the user have effective permissions to the container that contains the current object (inherited
permissions)? If yes, these permissions are used to calculate the effective permissions. If not, then the
user does not have effective permissions to the object.
Permissions from multiple sources
Users can gain
direct
permissions to objects either as users, as a result of equivalencies or as members of
a group. When the direct permissions result from multiple sources, Data Protector Express uses all of the
sources to determine the permissions.
Consider the following example: The Admin user has direct permissions to Read and Write to a folder
called My Backup Folder ; Admin is also a member of a group that has direct permissions to Modify to
the folder. As a result, his effective permissions are Read , Write and Modify .
Examples of effective permissions
The following six examples illustrate how effective permissions are calculated. The diagram below
illustrates these six examples.
1. The Data Protector Express administrator has direct permissions to the System Container , the object
at the very top of the catalog hierarchy. These determine his or her effective permissions to this object.
Because it is a container, the objects below it in the catalog all have inherited permissions because the
object directly above them has effective permissions. So, for example, the Data Protector Express
administrator has effective permissions to the
Home Folder because it inherits its permissions from
the object that contains it, the System Container . Thus, the Data Protector Express administrator has
effective permissions to all of the objects in the catalog.
2. A user (called User 1) has direct permissions to his User/Group folder, named
My Folder.
As a result,
by inherited permission, this user has effective permissions to the objects stored in this folder,
including any jobs, media or job folders stored in this folder. This user does not, however, have
effective permissions to the
Home Folder or to the System Container —these objects are above his
User/Group folder and thus do not inherit permissions.
3. A second user (called User 2) has direct permissions to a
Machine
, in this case a file or application
server with an attached backup drive and several associated disk drives. The direct permissions to the
file or application server mean that this second user also has effective permissions (by inheritance) to
the backup drive. So, for example, this user might be given read and write permissions to the file or
application server and thus to the backup drive.