Novell EDIRECTORY 8.8 SP3, Руководство администратора, Страница: 70 / 634

70 Novell eDirectory 8.8 Administration Guide
n
ov
do
cx (e
n)
11
Ju
ly 20
08
See “Creating an Object” on page 96 for information.
2 In Novell iManager, click the Roles and Tasks button Description: Roles and Tasks button .
3 Click Rights > Modify Trustees .
4 Specify the name and context of the highest-level container that you want the administrator to
manage, then click
OK .
5 On the Modify Trustees page, click Add Trustee , select the object that represents the
administrator, then click OK .
6 Click Assigned Rights for the trustee you just added, then click Add Property .
7 Select the properties you want to add to the property list, then click OK .
8 For each property that the administrator will manage, assign the needed rights.
Be sure to select the
Inheritable check box on each rights assignment.
9 Click Done , then click OK .
Blocking Inherited Rights to an eDirectory Object or Property
In eDirectory, rights assignments on containers can be inheritable or non-inheritable. In the NetWare
file system, all rights assignments on folders are inheritable. In both eDirectory and NetWare, you
can block such inheritance on individual subordinate items so that the rights aren’t effective on those
items, no matter who the trustee is. One exception is that the Supervisor right can’t be blocked in the
NetWare file system.
1 In Novell iManager, click the Roles and Tasks button Description: Roles and Tasks button
2 Click Rights > Modify Inherited Rights Filter .
3 Specify the name and context of the object whose inherited rights filter you want to modify,
then click
OK .
This displays a list of the inherited rights filters that have already been set on the object.
4
On the property page, edit the list of inherited rights filters as needed.
To edit the list of filters, you must have the Supervisor or Access Control right to the ACL
property of the object. You can set filters that block inherited rights to the object as a whole, to
all the properties of the object, and to individual properties.
NOTE: These filters won't block rights that are explicitly granted a trustee on this object,
because such rights aren't inherited.
5 Click OK .
Viewing Effective Rights to an eDirectory Object or Property
Effective rights are the actual rights users can exercise on specific network resources. They are
calculated by eDirectory based on explicit rights assignments, inheritance, and security equivalence.
You can query the system to determine a user’s effective rights to any resource.
1 In Novell iManager, click the Roles and Tasks button Description: Roles and Tasks button
2 Click Rights > View Effective Rights .
3 Enter the name and context of the trustee whose effective rights you want to view, then click
OK .
4
Choose from the following options: