File Server Systems Administration Set Up Access Rights for Each Directory, File –The ability to even see a directory or file (otherwise, it will be invisible) –The ability to get a read-only copy of a file in a directory (a copy that cannot be edited and then saved under the same name) –The ability to create, edit, and delete files and subdirectories –The ability to assign access rights in a directory to other users

File Server Systems Administration Set Up Access Rights for Each Directory, File –Must be done for each individual in each directory! –Usually, however, assign individual to groups –Give access rights to groups –Members of groups then get those rights –Using groups greatly simplifies the assignment of access rights

File Server Systems Administration Automatic Inheritance of Access Rights –Assign rights to individual or group in a directory –Rights automatically inherited in lower directories –Simplifies rights assignment Application Word ProcessingDatabase OracleQuickDB Assigned Browse And Read Rights Inherits Browse And Read Rights Inherits Browse And Read Rights

File Server Systems Administration Blocking of Inheritance –If assign rights explicitly in subdirectory, inheritance is blocked –Only assigned rights are effective Application Word ProcessingDatabase Oracle (Browse and Execute Only) QuickDB Assigned Browse And Read Rights Inherit Browse And Read Rights Assigned Browse And Execute Rights

File Server Systems Administration The Assignment of Rights: Recap –Rights can be assigned to individuals or group Group members receive all rights assigned to the group –Rights are automatically inherited in lower- level directories, unless –Rights are explicitly assigned in a directory, in which case automatic inheritance is blocked and only explicitly assigned rights are in effect in that directory

File Server Systems Administration Omnibus Rights –Administrator normally has omnibus rights –Can read, delete, etc. any file in any directory –Serious security concern