192 lines
7.8 KiB
HTML
192 lines
7.8 KiB
HTML
|
<?xml version="1.0" encoding="utf-8"?>
|
||
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
||
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-us">
|
||
|
<head>
|
||
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
<meta name="dc.language" scheme="rfc1766" content="en-us" />
|
||
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
<!-- US Government Users Restricted Rights -->
|
||
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
<meta name="dc.date" scheme="iso8601" content="2005-09-06" />
|
||
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
|
||
|
<meta name="security" content="public" />
|
||
|
<meta name="Robots" content="index,follow"/>
|
||
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
<title>iSeries authorities and NDS object rights</title>
|
||
|
<link rel="stylesheet" type="text/css" href="ibmidwb.css" />
|
||
|
<link rel="stylesheet" type="text/css" href="ic.css" />
|
||
|
</head>
|
||
|
<body>
|
||
|
<a id="Top_Of_Page" name="Top_Of_Page"></a><!-- Java sync-link -->
|
||
|
<script language = "Javascript" src = "../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
||
|
|
||
|
<a name="ndsmap"></a>
|
||
|
<h5 id="ndsmap">iSeries authorities and NDS object rights</h5>
|
||
|
<p>NetWare Directory Services (NDS) objects are protected by these rights: </p>
|
||
|
<dl>
|
||
|
<dt class="bold">Browse</dt>
|
||
|
<dd>Grants the trustee the right to see the object's name in the NDS tree.
|
||
|
</dd>
|
||
|
<dt class="bold">Create</dt>
|
||
|
<dd>Grants the trustee the right to create a new directory services object
|
||
|
within the container.
|
||
|
</dd>
|
||
|
<dt class="bold">Delete</dt>
|
||
|
<dd>Grants the trustee the right to delete an object.
|
||
|
</dd>
|
||
|
<dt class="bold">Rename</dt>
|
||
|
<dd>Grants the trustee the right to change the Name property for an object.
|
||
|
</dd>
|
||
|
<dt class="bold">Supervisor</dt>
|
||
|
<dd>Grants all possible rights to the user object.
|
||
|
</dd>
|
||
|
</dl>
|
||
|
<p>Attribute rights are not mapped. These rights can exist for each attribute
|
||
|
of an object and might differ for different attributes. This prevents the iSeries™ from working with attribute rights of NDS objects. Storage Management
|
||
|
Services (SMS) rights, which control a user's right to save and restore a
|
||
|
file, directory, NDS object, or other NetWare resource, are not mapped either.
|
||
|
These rights are architected by Novell but have not yet been put into effect.</p>
|
||
|
<p>iSeries authorities map to NDS rights, as follows:</p>
|
||
|
<a name="wq85"></a>
|
||
|
<table id="wq85" width="100%" summary="" border="1" frame="hsides" rules="rows" class="singleborder">
|
||
|
<caption>Table 3. iSeries Authorities and NDS Rights</caption>
|
||
|
<thead valign="bottom">
|
||
|
<tr>
|
||
|
<th id="wq86" width="14%" rowspan="2" align="center" valign="bottom">iSeries Authorities</th>
|
||
|
<th id="wq87" colspan="6" align="center" valign="bottom">NDS Rights</th>
|
||
|
</tr>
|
||
|
<tr>
|
||
|
<th id="wq88" width="14%" align="center" valign="bottom">None</th>
|
||
|
<th id="wq89" width="14%" align="center" valign="bottom">Browse</th>
|
||
|
<th id="wq90" width="14%" align="center" valign="bottom">Create</th>
|
||
|
<th id="wq91" width="14%" align="center" valign="bottom">Delete</th>
|
||
|
<th id="wq92" width="14%" align="center" valign="bottom">Rename</th>
|
||
|
<th id="wq93" width="14%" align="center" valign="bottom">Supervisor</th>
|
||
|
</tr>
|
||
|
</thead>
|
||
|
<tbody valign="top">
|
||
|
<tr>
|
||
|
<td align="left" valign="top" headers="wq86">*EXCLUDE</td>
|
||
|
<td align="center" valign="top" headers="wq87 wq88">X</td>
|
||
|
<td headers="wq87 wq89"></td>
|
||
|
<td headers="wq87 wq90"></td>
|
||
|
<td headers="wq87 wq91"></td>
|
||
|
<td headers="wq87 wq92"></td>
|
||
|
<td headers="wq87 wq93"></td>
|
||
|
</tr>
|
||
|
<tr>
|
||
|
<td align="left" valign="top" headers="wq86">*OBJOPR</td>
|
||
|
<td align="center" valign="top" headers="wq87 wq88"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq89">*</td>
|
||
|
<td align="center" valign="top" headers="wq87 wq90">*</td>
|
||
|
<td align="center" valign="top" headers="wq87 wq91">*</td>
|
||
|
<td align="center" valign="top" headers="wq87 wq92">*</td>
|
||
|
<td headers="wq87 wq93"></td>
|
||
|
</tr>
|
||
|
<tr>
|
||
|
<td align="left" valign="top" headers="wq86">*OBJMGT</td>
|
||
|
<td headers="wq87 wq88"></td>
|
||
|
<td headers="wq87 wq89"></td>
|
||
|
<td headers="wq87 wq90"></td>
|
||
|
<td headers="wq87 wq91"></td>
|
||
|
<td headers="wq87 wq92"></td>
|
||
|
<td headers="wq87 wq93"></td>
|
||
|
</tr>
|
||
|
<tr>
|
||
|
<td align="left" valign="top" headers="wq86">*OBJALTER</td>
|
||
|
<td headers="wq87 wq88"></td>
|
||
|
<td headers="wq87 wq89"></td>
|
||
|
<td headers="wq87 wq90"></td>
|
||
|
<td headers="wq87 wq91"></td>
|
||
|
<td headers="wq87 wq92"></td>
|
||
|
<td headers="wq87 wq93"></td>
|
||
|
</tr>
|
||
|
<tr>
|
||
|
<td align="left" valign="top" headers="wq86">*OBJREF</td>
|
||
|
<td align="center" valign="top" headers="wq87 wq88"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq89"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq90"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq91"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq92"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq93">X</td>
|
||
|
</tr>
|
||
|
<tr>
|
||
|
<td align="left" valign="top" headers="wq86">*OBJEXIST</td>
|
||
|
<td headers="wq87 wq88"></td>
|
||
|
<td headers="wq87 wq89"></td>
|
||
|
<td headers="wq87 wq90"></td>
|
||
|
<td headers="wq87 wq91"></td>
|
||
|
<td headers="wq87 wq92"></td>
|
||
|
<td headers="wq87 wq93"></td>
|
||
|
</tr>
|
||
|
<tr>
|
||
|
<td align="left" valign="top" headers="wq86">*AUTLMGT</td>
|
||
|
<td headers="wq87 wq88"></td>
|
||
|
<td headers="wq87 wq89"></td>
|
||
|
<td headers="wq87 wq90"></td>
|
||
|
<td headers="wq87 wq91"></td>
|
||
|
<td headers="wq87 wq92"></td>
|
||
|
<td headers="wq87 wq93"></td>
|
||
|
</tr>
|
||
|
<tr>
|
||
|
<td align="left" valign="top" headers="wq86">*READ</td>
|
||
|
<td align="center" valign="top" headers="wq87 wq88"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq89">X</td>
|
||
|
<td headers="wq87 wq90"></td>
|
||
|
<td headers="wq87 wq91"></td>
|
||
|
<td headers="wq87 wq92"></td>
|
||
|
<td headers="wq87 wq93"></td>
|
||
|
</tr>
|
||
|
<tr>
|
||
|
<td align="left" valign="top" headers="wq86">*ADD</td>
|
||
|
<td align="center" valign="top" headers="wq87 wq88"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq89"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq90">X</td>
|
||
|
<td headers="wq87 wq91"></td>
|
||
|
<td headers="wq87 wq92"></td>
|
||
|
<td headers="wq87 wq93"></td>
|
||
|
</tr>
|
||
|
<tr>
|
||
|
<td align="left" valign="top" headers="wq86">*UPD</td>
|
||
|
<td align="center" valign="top" headers="wq87 wq88"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq89"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq90"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq91"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq92">X</td>
|
||
|
<td headers="wq87 wq93"></td>
|
||
|
</tr>
|
||
|
<tr>
|
||
|
<td align="left" valign="top" headers="wq86">*DLT</td>
|
||
|
<td align="center" valign="top" headers="wq87 wq88"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq89"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq90"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq91">X</td>
|
||
|
<td headers="wq87 wq92"></td>
|
||
|
<td headers="wq87 wq93"></td>
|
||
|
</tr>
|
||
|
<tr>
|
||
|
<td align="left" valign="top" headers="wq86">*EXECUTE</td>
|
||
|
<td align="center" valign="top" headers="wq87 wq88"></td>
|
||
|
<td align="center" valign="top" headers="wq87 wq89">X</td>
|
||
|
<td headers="wq87 wq90"></td>
|
||
|
<td headers="wq87 wq91"></td>
|
||
|
<td headers="wq87 wq92"></td>
|
||
|
<td headers="wq87 wq93"></td>
|
||
|
</tr>
|
||
|
<tr>
|
||
|
<td colspan="7" align="left" valign="top" headers="wq86 wq87 wq88 wq87 wq89 wq87 wq90 wq87 wq91 wq87 wq92 wq87 wq93">
|
||
|
<a name="wq94"></a>
|
||
|
<div class="notetitle" id="wq94">Note:</div>
|
||
|
<div class="notebody"> The iSeries *OBJOPR authority bit is turned on when a user has any data authority
|
||
|
(*READ, *ADD, *UPD, *DLT, or *EXECUTE), but is not mapped explicitly to any
|
||
|
specific NetWare right or rights.</div></td>
|
||
|
</tr>
|
||
|
</tbody>
|
||
|
</table>
|
||
|
<a id="Bot_Of_Page" name="Bot_Of_Page"></a>
|
||
|
</body>
|
||
|
</html>
|