Solved

Netware 4.11 users moving directories on server

Posted on 1998-10-14
6
239 Views
Last Modified: 2008-02-01
Users have recently moved a couple of directories on our 4.11 server (4 volumes).  Is there a way that I can stop them doing it - they need all rights to the various directories they can see (except supervisor & access control) so they can change files, but NOT permission to change the location of the directory.
You said there were utilities available to list users and their file permissions - can you tell me what they are called?
0
Comment
Question by:NickyFrancis
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 3

Accepted Solution

by:
brosenb0 earned 50 total points
ID: 1593720
It sounds like your users have access rights too high up the directory path.  For example, consider the following: -

Directory structure containing the data for three independent applications:

VOL1:APPDATA\APP1
            \APP2
            \APP3

Access Groups: (we prefix our application access groups with an 'A-'for readability)
         
A-APP1 has rights RWCE F to VOL1:APPDATA\APP1
A-APP2 has rights RWCEMF to VOL1:APPDATA\APP2
A-APP3 has rights RWC  F to VOL1:APPDATA\APP3

Now because rights flow down the directory structure, unless there is an implicit inherited rights mask in place, if A-APP1 inadvertantly has the 'M' right to VOL1:APPDATA, either directly or inherited, then any member of A-APP1 can rename files and directories and change file attributes for all files and directories below VOL1:APPDATA.  This includes APP2 and APP3.

Assuming a search drive is mapped to Sys:Public, to view the trustees of the current directory, enter:

Rights /T

For more help on the Rights command, enter Rights /?

Alternatively you can use NWAdmin, select the group and list its file system trustee assignments by selecting the 'Rights to files and directories'page.  Hit the show button and select the volume object to check.

0
 

Author Comment

by:NickyFrancis
ID: 1593721
I have taken off the Modify right on two access groups to two particular subdirectories.  What concerns me is that I have a feeling that users will now not be able to load a data file from one of these directories into an Office 97 product, make changes and save it back again.  This is what they need to be able to do.  The files in these 2 directories are used by various members of staff and modified every day.  Thanks for your answer on Rights - it would be nice if Novell produced a report that was a bit more readable but we piped the result to a file and  loaded it into Excel to sort it out.
0
 

Author Comment

by:NickyFrancis
ID: 1593722
Further to my previous message:
Users could not save amended files from the directory, back to their original filename with the Modify flag off on that particular directory.  I seem to be back to square one again!
Any more ideas?
0
Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

 
LVL 3

Expert Comment

by:brosenb0
ID: 1593723
Check they have the 'Write' right.  Modify is only needed to rename subdirectories and change file attributes.  It should not affect writing to an existing file.  The other thing you can do is flag the subdirectories as 'Rename Inhibit' using Filer.Exe
0
 
LVL 3

Expert Comment

by:sverre
ID: 1593724
If they moving the directories, try to flag it Delete Inhibit.
The directory is actually first copied then deleted if you move it.
0
 

Author Comment

by:NickyFrancis
ID: 1593725
I returned the rights to include Modify and have set the
directory attribute to Rename Inhibit and not YET had any
further problems.
thanks for your help.
0

Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
This article outlines some of the reasons why an email message gets flagged as spam on a recipient's end.
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question