nerdexam
Novell

050-696 · Question #144

Which property right allows a trustee of an object to add or remove its name as a value of the object property?

The correct answer is F. Add Self. The Add Self property right in eDirectory allows a trustee to add or remove only its own object name as a value in a given property, commonly used for self-managed group membership.

Novell eDirectory Management

Question

Which property right allows a trustee of an object to add or remove its name as a value of the object property?

Options

  • ARead
  • BWrite
  • CModify
  • DDelete
  • EBrowse
  • FAdd Self
  • GRename
  • HCompare
  • IFile Scan
  • JInheritable

How the community answered

(60 responses)
  • C
    13% (8)
  • D
    2% (1)
  • E
    3% (2)
  • F
    72% (43)
  • I
    8% (5)
  • J
    2% (1)

Why each option

The Add Self property right in eDirectory allows a trustee to add or remove only its own object name as a value in a given property, commonly used for self-managed group membership.

ARead

Read permits a trustee to view property values but grants absolutely no ability to add or remove any values.

BWrite

Write grants full permission to add, modify, or delete any value in the property, which is broader than the self-only capability described in the question.

CModify

Modify is an object right for renaming or moving objects in the tree - it is not a property right and does not relate to managing property values.

DDelete

Delete is an object right that removes objects from the eDirectory tree - it is not a property right concerned with individual property values.

EBrowse

Browse is an object right that allows a trustee to see an object in the tree - it is not a property right at all.

FAdd SelfCorrect

Add Self is a specialized property right that restricts what a trustee can write to only its own distinguished name - the trustee may insert or delete itself as a value in the property (such as a group's Member attribute) without having broader Write access to change other values. This design allows users to manage their own membership in groups or distribution lists without being able to manipulate other users' memberships. It provides a scoped, self-referential form of write access.

GRename

Rename is an object right that permits changing an object's common name - it has no function as a property right for adding values.

HCompare

Compare allows a trustee to test whether a given value matches a property without actually reading or returning the value - it grants no ability to modify values.

IFile Scan

File Scan is a NetWare file system trustee right used for directory listings - it is not part of the eDirectory object or property rights model.

JInheritable

Inheritable is a modifier flag on a right that controls whether the right propagates to child containers and objects - it does not by itself grant any access to property values.

Concept tested: eDirectory Add Self property right for self-referential access

Source: https://www.netiq.com/documentation/edirectory-92/edir_admin/data/b1j5pzjk.html

Topics

#Add Self right#property rights#group membership#trustee rights

Community Discussion

No community discussion yet for this question.

Full 050-696 Practice