Solved

Netware 4.11 users moving directories on server

Posted on 1998-10-14
6
223 Views
Last Modified: 2008-02-01
Users have recently moved a couple of directories on our 4.11 server (4 volumes).  Is there a way that I can stop them doing it - they need all rights to the various directories they can see (except supervisor & access control) so they can change files, but NOT permission to change the location of the directory.
You said there were utilities available to list users and their file permissions - can you tell me what they are called?
0
Comment
Question by:NickyFrancis
  • 3
  • 2
6 Comments
 
LVL 3

Accepted Solution

by:
brosenb0 earned 50 total points
Comment Utility
It sounds like your users have access rights too high up the directory path.  For example, consider the following: -

Directory structure containing the data for three independent applications:

VOL1:APPDATA\APP1
            \APP2
            \APP3

Access Groups: (we prefix our application access groups with an 'A-'for readability)
         
A-APP1 has rights RWCE F to VOL1:APPDATA\APP1
A-APP2 has rights RWCEMF to VOL1:APPDATA\APP2
A-APP3 has rights RWC  F to VOL1:APPDATA\APP3

Now because rights flow down the directory structure, unless there is an implicit inherited rights mask in place, if A-APP1 inadvertantly has the 'M' right to VOL1:APPDATA, either directly or inherited, then any member of A-APP1 can rename files and directories and change file attributes for all files and directories below VOL1:APPDATA.  This includes APP2 and APP3.

Assuming a search drive is mapped to Sys:Public, to view the trustees of the current directory, enter:

Rights /T

For more help on the Rights command, enter Rights /?

Alternatively you can use NWAdmin, select the group and list its file system trustee assignments by selecting the 'Rights to files and directories'page.  Hit the show button and select the volume object to check.

0
 

Author Comment

by:NickyFrancis
Comment Utility
I have taken off the Modify right on two access groups to two particular subdirectories.  What concerns me is that I have a feeling that users will now not be able to load a data file from one of these directories into an Office 97 product, make changes and save it back again.  This is what they need to be able to do.  The files in these 2 directories are used by various members of staff and modified every day.  Thanks for your answer on Rights - it would be nice if Novell produced a report that was a bit more readable but we piped the result to a file and  loaded it into Excel to sort it out.
0
 

Author Comment

by:NickyFrancis
Comment Utility
Further to my previous message:
Users could not save amended files from the directory, back to their original filename with the Modify flag off on that particular directory.  I seem to be back to square one again!
Any more ideas?
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 3

Expert Comment

by:brosenb0
Comment Utility
Check they have the 'Write' right.  Modify is only needed to rename subdirectories and change file attributes.  It should not affect writing to an existing file.  The other thing you can do is flag the subdirectories as 'Rename Inhibit' using Filer.Exe
0
 
LVL 3

Expert Comment

by:sverre
Comment Utility
If they moving the directories, try to flag it Delete Inhibit.
The directory is actually first copied then deleted if you move it.
0
 

Author Comment

by:NickyFrancis
Comment Utility
I returned the rights to include Modify and have set the
directory attribute to Rename Inhibit and not YET had any
further problems.
thanks for your help.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Veeam Backup & Replication has added a new integration – Veeam Backup for Microsoft Office 365.  In this blog, we will discuss how you can benefit from Office 365 email backup with the Veeam’s new product and try to shed some light on the needs and …
In this step by step tutorial with screenshots, we will show you HOW TO: Enable SSH Remote Access on a VMware vSphere Hypervisor 6.5 (ESXi 6.5). This is important if you need to enable SSH remote access for additional troubleshooting of the ESXi hos…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now