Solved

Netware 4.11 users moving directories on server

Posted on 1998-10-14
6
226 Views
Last Modified: 2008-02-01
Users have recently moved a couple of directories on our 4.11 server (4 volumes).  Is there a way that I can stop them doing it - they need all rights to the various directories they can see (except supervisor & access control) so they can change files, but NOT permission to change the location of the directory.
You said there were utilities available to list users and their file permissions - can you tell me what they are called?
0
Comment
Question by:NickyFrancis
  • 3
  • 2
6 Comments
 
LVL 3

Accepted Solution

by:
brosenb0 earned 50 total points
ID: 1593720
It sounds like your users have access rights too high up the directory path.  For example, consider the following: -

Directory structure containing the data for three independent applications:

VOL1:APPDATA\APP1
            \APP2
            \APP3

Access Groups: (we prefix our application access groups with an 'A-'for readability)
         
A-APP1 has rights RWCE F to VOL1:APPDATA\APP1
A-APP2 has rights RWCEMF to VOL1:APPDATA\APP2
A-APP3 has rights RWC  F to VOL1:APPDATA\APP3

Now because rights flow down the directory structure, unless there is an implicit inherited rights mask in place, if A-APP1 inadvertantly has the 'M' right to VOL1:APPDATA, either directly or inherited, then any member of A-APP1 can rename files and directories and change file attributes for all files and directories below VOL1:APPDATA.  This includes APP2 and APP3.

Assuming a search drive is mapped to Sys:Public, to view the trustees of the current directory, enter:

Rights /T

For more help on the Rights command, enter Rights /?

Alternatively you can use NWAdmin, select the group and list its file system trustee assignments by selecting the 'Rights to files and directories'page.  Hit the show button and select the volume object to check.

0
 

Author Comment

by:NickyFrancis
ID: 1593721
I have taken off the Modify right on two access groups to two particular subdirectories.  What concerns me is that I have a feeling that users will now not be able to load a data file from one of these directories into an Office 97 product, make changes and save it back again.  This is what they need to be able to do.  The files in these 2 directories are used by various members of staff and modified every day.  Thanks for your answer on Rights - it would be nice if Novell produced a report that was a bit more readable but we piped the result to a file and  loaded it into Excel to sort it out.
0
 

Author Comment

by:NickyFrancis
ID: 1593722
Further to my previous message:
Users could not save amended files from the directory, back to their original filename with the Modify flag off on that particular directory.  I seem to be back to square one again!
Any more ideas?
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 3

Expert Comment

by:brosenb0
ID: 1593723
Check they have the 'Write' right.  Modify is only needed to rename subdirectories and change file attributes.  It should not affect writing to an existing file.  The other thing you can do is flag the subdirectories as 'Rename Inhibit' using Filer.Exe
0
 
LVL 3

Expert Comment

by:sverre
ID: 1593724
If they moving the directories, try to flag it Delete Inhibit.
The directory is actually first copied then deleted if you move it.
0
 

Author Comment

by:NickyFrancis
ID: 1593725
I returned the rights to include Modify and have set the
directory attribute to Rename Inhibit and not YET had any
further problems.
thanks for your help.
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Mirgrate VM out of SLES 11 to Xenserver 2 488
Network troubleshooting 4 282
Novell network shared file issue 6 606
Quickest way of removing Zenworks Configuration Management? 4 465
The question appears often enough, how do I transfer my data from my old server to the new server while preserving file shares, share permissions, and NTFS permisions.  Here are my tips for handling such a transfer.
February 24, 2017 — On February 23, Travis Ormandy, a vulnerability researcher at Google, reported on Twitter (https://twitter.com/taviso/status/834900838837411840) that massive stores of data have been leaked by CloudFlare, a company that provide…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question