Can a supervisor right be blocked in the file system at lower directories by using trustee at the lower directory.
I know the supervisor cannot be blocked in a file system security with an IRF but i am not sure regarding trustee account. Any help will be welcomed

Regards
stephen

Report this post to a moderator

The supervisor can not be blocked in File system whether thru IRF or trustee rights. It can be blocked in NDS

Report this post to a moderator

I felt your answer was right & got a brief explanation but not to the point in the course ware which i purchased from Novell but the exam notes essentials contradicts it. Can anyone confirm this to me. Below is the question & explanation of exam notes but i doubt the answer.

Q) identify the true statements regarding blocking supervisory inheritance of rights in the file system security of the object?
1) the supervisory right cannot be blocked by an IRF
2) make a new trustee assignment for that the user at the lower level in the file system directory
3) the supervisory cannot be blocked by an explicit trustee assignment

Ans) 1 & 2

Explanation : the supervisory right can be blocked by an IRF in the files system. However the user with supervisory right can be blocked by making a new trustee assignment (without supervisory right) for that the user at the lower level in the file system directory




------------------

Report this post to a moderator

From the Novell Press:

The supervisor file/directory rights cannot be revoked by and IRF.....Any user that has supervisor rights to a file system directly cannot have file system rights masked on that file server.

The supervisor object/property rights can be revoked by an IRF -
An IRF can be applied to all objects, including the server object. Therefore, you can limit a person's supervisor access to a NW5 file server by applying an IRF to the server object. Remember that a user possessing the managed right (Write right to the ACL) to a server object also has rights to the file system volumes for that server as well.

I hope this answers your question.


------------------
LANlord
MCNE,MCSE,CCNA

Report this post to a moderator

Sorry for the mistake in typing the supervisory right cannot be blocked by an IRF in filesystem.

Explanation : the supervisory right cannot be blocked by an IRF in the files system. However the user with supervisory right can be blocked by making a new trustee assignment (without supervisory right) for that the user at the lower level in the file system directory.

Lanlord you are right, but no where it specifies or stresses on trustees at the lower level directories blocking of Supervisory rights.
Your explaination says that the supervisory right cannot be blocked in the filesystem. So according to you do you feel examessentials have made a mistake???
Can you or anyone clarify this.

I am giving my exams on saturday i.e day after tommorrow.



------------------

Report this post to a moderator

I think the question you are asking..."However the user with supervisory right can be blocked by making a new trustee assignment (without supervisory right) for that the user at the lower level in the file system directory"...falls into the category of Object/Property rights. Since making a new trustee assignment is a property right, not a file system right, I don't think there is a mistake. I think the question may be worded a little funny, maybe to the point it might be misleading you, but I think there mistake in the correct answer. I hope this helps. Please let me know if it doesn't.


------------------
LANlord
MCNE,MCSE,CCNA

Report this post to a moderator