Using both NetWare and UnixWare for file access control

When ``Both'' is selected as the mode for file access control, the user must go through a two-operating-system check:

• NetWare must allow the access. If NetWare denies the access, the user cannot access the file or directory from NetWare.

• UnixWare must also allow the access. If the UnixWare permissions have been changed so that the NetWare user does not have permission to access to the file or directory, the user cannot access the file or directory from NetWare.

NetWare and UnixWare filesystem security checks

NetWare Services calculates the rights for both NetWare and UnixWare.

Once the rights are calculated for both systems, the right is granted only if both systems allow it. See ``Using UnixWare only for file access control'' for information on how UnixWare permissions are translated to NetWare rights.

Three NetWare rights (Supervisor, Modify, and Access Control) do not match any UnixWare permissions. These rights are granted under the following conditions:

• The Supervisor and Access Control rights are granted from NetWare and the hybrid UID matches the UnixWare UID.

• The Modify right is granted from NetWare, the hybrid UID matches the UnixWare UID, and the user has the w (Write) permission in the parent directory.

File access control utilities

The NetWare Services product access routines check both NetWare rights and UnixWare permissions before returning NetWare rights information.

NetWare and UnixWare utilities should display valid rights information except for the Supervisor right. It is possible for a user to have the Supervisor right and not have all rights to the file.