050-696 · Question #144
Which property right allows a trustee of an object to add or remove its name as a value of the object property?
The correct answer is F. Add Self. The Add Self property right in eDirectory allows a trustee to add or remove only its own object name as a value in a given property, commonly used for self-managed group membership.
Question
Options
- ARead
- BWrite
- CModify
- DDelete
- EBrowse
- FAdd Self
- GRename
- HCompare
- IFile Scan
- JInheritable
How the community answered
(60 responses)- C13% (8)
- D2% (1)
- E3% (2)
- F72% (43)
- I8% (5)
- J2% (1)
Why each option
The Add Self property right in eDirectory allows a trustee to add or remove only its own object name as a value in a given property, commonly used for self-managed group membership.
Read permits a trustee to view property values but grants absolutely no ability to add or remove any values.
Write grants full permission to add, modify, or delete any value in the property, which is broader than the self-only capability described in the question.
Modify is an object right for renaming or moving objects in the tree - it is not a property right and does not relate to managing property values.
Delete is an object right that removes objects from the eDirectory tree - it is not a property right concerned with individual property values.
Browse is an object right that allows a trustee to see an object in the tree - it is not a property right at all.
Add Self is a specialized property right that restricts what a trustee can write to only its own distinguished name - the trustee may insert or delete itself as a value in the property (such as a group's Member attribute) without having broader Write access to change other values. This design allows users to manage their own membership in groups or distribution lists without being able to manipulate other users' memberships. It provides a scoped, self-referential form of write access.
Rename is an object right that permits changing an object's common name - it has no function as a property right for adding values.
Compare allows a trustee to test whether a given value matches a property without actually reading or returning the value - it grants no ability to modify values.
File Scan is a NetWare file system trustee right used for directory listings - it is not part of the eDirectory object or property rights model.
Inheritable is a modifier flag on a right that controls whether the right propagates to child containers and objects - it does not by itself grant any access to property values.
Concept tested: eDirectory Add Self property right for self-referential access
Source: https://www.netiq.com/documentation/edirectory-92/edir_admin/data/b1j5pzjk.html
Topics
Community Discussion
No community discussion yet for this question.