Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Netware 4.11 users moving directories on server

Posted on 1998-10-14
6
Medium Priority
?
243 Views
Last Modified: 2008-02-01
Users have recently moved a couple of directories on our 4.11 server (4 volumes).  Is there a way that I can stop them doing it - they need all rights to the various directories they can see (except supervisor & access control) so they can change files, but NOT permission to change the location of the directory.
You said there were utilities available to list users and their file permissions - can you tell me what they are called?
0
Comment
Question by:NickyFrancis
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 3

Accepted Solution

by:
brosenb0 earned 200 total points
ID: 1593720
It sounds like your users have access rights too high up the directory path.  For example, consider the following: -

Directory structure containing the data for three independent applications:

VOL1:APPDATA\APP1
            \APP2
            \APP3

Access Groups: (we prefix our application access groups with an 'A-'for readability)
         
A-APP1 has rights RWCE F to VOL1:APPDATA\APP1
A-APP2 has rights RWCEMF to VOL1:APPDATA\APP2
A-APP3 has rights RWC  F to VOL1:APPDATA\APP3

Now because rights flow down the directory structure, unless there is an implicit inherited rights mask in place, if A-APP1 inadvertantly has the 'M' right to VOL1:APPDATA, either directly or inherited, then any member of A-APP1 can rename files and directories and change file attributes for all files and directories below VOL1:APPDATA.  This includes APP2 and APP3.

Assuming a search drive is mapped to Sys:Public, to view the trustees of the current directory, enter:

Rights /T

For more help on the Rights command, enter Rights /?

Alternatively you can use NWAdmin, select the group and list its file system trustee assignments by selecting the 'Rights to files and directories'page.  Hit the show button and select the volume object to check.

0
 

Author Comment

by:NickyFrancis
ID: 1593721
I have taken off the Modify right on two access groups to two particular subdirectories.  What concerns me is that I have a feeling that users will now not be able to load a data file from one of these directories into an Office 97 product, make changes and save it back again.  This is what they need to be able to do.  The files in these 2 directories are used by various members of staff and modified every day.  Thanks for your answer on Rights - it would be nice if Novell produced a report that was a bit more readable but we piped the result to a file and  loaded it into Excel to sort it out.
0
 

Author Comment

by:NickyFrancis
ID: 1593722
Further to my previous message:
Users could not save amended files from the directory, back to their original filename with the Modify flag off on that particular directory.  I seem to be back to square one again!
Any more ideas?
0
Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
LVL 3

Expert Comment

by:brosenb0
ID: 1593723
Check they have the 'Write' right.  Modify is only needed to rename subdirectories and change file attributes.  It should not affect writing to an existing file.  The other thing you can do is flag the subdirectories as 'Rename Inhibit' using Filer.Exe
0
 
LVL 3

Expert Comment

by:sverre
ID: 1593724
If they moving the directories, try to flag it Delete Inhibit.
The directory is actually first copied then deleted if you move it.
0
 

Author Comment

by:NickyFrancis
ID: 1593725
I returned the rights to include Modify and have set the
directory attribute to Rename Inhibit and not YET had any
further problems.
thanks for your help.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This month, Experts Exchange sat down with resident SQL expert, Jim Horn, for an in-depth look into the makings of a successful career in SQL.
Article by: evilrix
Looking for a way to avoid searching through large data sets for data that doesn't exist? A Bloom Filter might be what you need. This data structure is a probabilistic filter that allows you to avoid unnecessary searches when you know the data defin…
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
How to fix incompatible JVM issue while installing Eclipse While installing Eclipse in windows, got one error like above and unable to proceed with the installation. This video describes how to successfully install Eclipse. How to solve incompa…

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question