File access control

In NetWare, trustee assignments are used to grant access to files and directories; these assignments are part of the file system. In NetWare Services, trustee assignments are kept in a separate, per-volume database in the volume's control directory.

Since NetWare Services is a process running on UnixWare, NetWare administrators can select how they want the NetWare trustee assignments and the UnixWare permissions to interact with each other in granting access.

The scoadmin(1M) NetWare Volume Setup utility allows the network administrator to set variables for specific volumes or for volumes system-wide (see ``Maintaining the NetWare server'').

The following list describes the possible modes:

None

All NetWare users are granted full access to all files and directories as if they had Supervisor rights. There are no access controls. See ``Using neither NetWare nor UnixWare for file access control'' for more information.

NetWare

NetWare-only enforcement. NetWare trustee assignments and file attributes control a NetWare user's access to files and directories. File system security must be set up with NetWare utilities such as RIGHTS and NETADMIN. The UnixWare permissions are ignored. See ``Using NetWare only for file access control'' for more information.

UNIX

UNIX-only enforcement. UnixWare permissions control a NetWare user's access to files and directories. Trustee assignments are ignored and NetWare rights are granted according to UnixWare permissions. Filesystem security must be set up with UnixWare utilities such as chmod(1), chown(1), chgrp(1). See ``Using UnixWare only for file access control'' for more information.

Both

Both NetWare and UnixWare enforcement. Both NetWare trustee assignments and UnixWare permissions control file and directory access. File system security must be set from both NetWare and UnixWare. See ``Using both NetWare and UnixWare for file access control'' for more information.