nerdexam
Novell

050-696 · Question #113

In your eDirectory tree, user DCoughanour is given an explicit trustee assignment to the IS.SYD. DA Organizational Unit object. He is granted Browse and Rename rights to this container. DCoughanour…

The correct answer is D. Browse, Create, and Rename. In eDirectory, security equivalence merges another trustee's rights with your own. Because JJackson holds rights on the parent container SYD.DA, those rights flow down to IS.SYD.DA and combine with DCoughanour's explicit assignment.

Novell eDirectory Management

Question

In your eDirectory tree, user DCoughanour is given an explicit trustee assignment to the IS.SYD. DA Organizational Unit object. He is granted Browse and Rename rights to this container. DCoughanour has no explicit assignments anywhere higher in the tree. User JJackson is given an explicit trustee assignment to the SYD. DA Organizational Unit. He is granted Browse, Create, and Rename rights to the container. You make DCoughanour security equivalent to JJackson. What effective rights does DCoughanour have to IS.SYD. DA?

Options

  • ABrowse
  • BSupervisor
  • CBrowse and Rename
  • DBrowse, Create, and Rename
  • ESupervisor, Browse, Create, and Rename
  • FDCoughanour has no rights to the container.

How the community answered

(59 responses)
  • A
    7% (4)
  • B
    10% (6)
  • C
    3% (2)
  • D
    78% (46)
  • E
    2% (1)

Why each option

In eDirectory, security equivalence merges another trustee's rights with your own. Because JJackson holds rights on the parent container SYD.DA, those rights flow down to IS.SYD.DA and combine with DCoughanour's explicit assignment.

ABrowse

Browse alone is insufficient because security equivalence to JJackson contributes Create and Rename through inherited rights from SYD.DA.

BSupervisor

No Supervisor right exists in any relevant trustee assignment or security equivalence in this scenario.

CBrowse and Rename

Browse and Rename reflects only DCoughanour's explicit assignment and ignores the Create right added via security equivalence and inheritance.

DBrowse, Create, and RenameCorrect

DCoughanour's explicit trustee assignment at IS.SYD.DA grants Browse and Rename. Through security equivalence to JJackson, DCoughanour also gains JJackson's Browse, Create, and Rename rights on SYD.DA, which inherit downward into IS.SYD.DA. Merging both sets yields Browse, Create, and Rename as the effective rights at IS.SYD.DA.

ESupervisor, Browse, Create, and Rename

Supervisor, Browse, Create, and Rename is incorrect because no Supervisor right is present in either the explicit assignments or the security equivalence.

FDCoughanour has no rights to the container.

DCoughanour does have rights to the container through his own explicit assignment and through rights inherited via security equivalence to JJackson.

Concept tested: eDirectory security equivalence and inherited effective rights calculation

Source: https://www.novell.com/documentation/edir88/edir88/

Topics

#effective rights#security equivalence#trustee assignment#eDirectory rights

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 050-696 Practice