Solved

Netware 4.11 users moving directories on server

Posted on 1998-10-14
6
227 Views
Last Modified: 2008-02-01
Users have recently moved a couple of directories on our 4.11 server (4 volumes).  Is there a way that I can stop them doing it - they need all rights to the various directories they can see (except supervisor & access control) so they can change files, but NOT permission to change the location of the directory.
You said there were utilities available to list users and their file permissions - can you tell me what they are called?
0
Comment
Question by:NickyFrancis
  • 3
  • 2
6 Comments
 
LVL 3

Accepted Solution

by:
brosenb0 earned 50 total points
ID: 1593720
It sounds like your users have access rights too high up the directory path.  For example, consider the following: -

Directory structure containing the data for three independent applications:

VOL1:APPDATA\APP1
            \APP2
            \APP3

Access Groups: (we prefix our application access groups with an 'A-'for readability)
         
A-APP1 has rights RWCE F to VOL1:APPDATA\APP1
A-APP2 has rights RWCEMF to VOL1:APPDATA\APP2
A-APP3 has rights RWC  F to VOL1:APPDATA\APP3

Now because rights flow down the directory structure, unless there is an implicit inherited rights mask in place, if A-APP1 inadvertantly has the 'M' right to VOL1:APPDATA, either directly or inherited, then any member of A-APP1 can rename files and directories and change file attributes for all files and directories below VOL1:APPDATA.  This includes APP2 and APP3.

Assuming a search drive is mapped to Sys:Public, to view the trustees of the current directory, enter:

Rights /T

For more help on the Rights command, enter Rights /?

Alternatively you can use NWAdmin, select the group and list its file system trustee assignments by selecting the 'Rights to files and directories'page.  Hit the show button and select the volume object to check.

0
 

Author Comment

by:NickyFrancis
ID: 1593721
I have taken off the Modify right on two access groups to two particular subdirectories.  What concerns me is that I have a feeling that users will now not be able to load a data file from one of these directories into an Office 97 product, make changes and save it back again.  This is what they need to be able to do.  The files in these 2 directories are used by various members of staff and modified every day.  Thanks for your answer on Rights - it would be nice if Novell produced a report that was a bit more readable but we piped the result to a file and  loaded it into Excel to sort it out.
0
 

Author Comment

by:NickyFrancis
ID: 1593722
Further to my previous message:
Users could not save amended files from the directory, back to their original filename with the Modify flag off on that particular directory.  I seem to be back to square one again!
Any more ideas?
0
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
LVL 3

Expert Comment

by:brosenb0
ID: 1593723
Check they have the 'Write' right.  Modify is only needed to rename subdirectories and change file attributes.  It should not affect writing to an existing file.  The other thing you can do is flag the subdirectories as 'Rename Inhibit' using Filer.Exe
0
 
LVL 3

Expert Comment

by:sverre
ID: 1593724
If they moving the directories, try to flag it Delete Inhibit.
The directory is actually first copied then deleted if you move it.
0
 

Author Comment

by:NickyFrancis
ID: 1593725
I returned the rights to include Modify and have set the
directory attribute to Rename Inhibit and not YET had any
further problems.
thanks for your help.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your phone running out of space to hold pictures?  This article will show you quick tips on how to solve this problem.
IT certifications are a concrete representation of continual learning on the part of the candidate.  Continual learning is necessary for the long term success of an IT professional, but are IT certifications the right path for you?
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question