IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
- File and directory rights
Menu diagram: Netware administrator directory PUBLIC "Details: Trustee
of this Directory"
File and directory rights control the operations which a trustee, in this case
the user RZenk, can perform in a file or directory. Just as object rights are
independent from object property rights, file and directory rights are
completely independent from the two NDS rights. The following file and
directory rights exist:
- Supervisor
- Read
- Write
- Create
- Erase
- Modify
- File Scan
- Access Control
With the rights Read, Write, Create and Erase, a trustee can read, change,
create and delete files or directories. Modify is not intended for changing files,
but for renaming files and directories. In addition, the right Modify can be
used to change the attributes of files or directories. The right File Scan allows
users to view files or directories, for example with the command NDIR or
even DIR. With the right Access Control, other NDS objects can be granted
file and directory rights, with the exception of the supervisor right.
Unlike the object rights, where the right Create is only available at container
level, the Create right in the file system can also be allocated for files, not just
for directories. In the case of files, this right allows a deleted file to be restored
through the Salvage mechanism. In the NDS, objects cannot be restored once
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000