050-696 · Question #43
Which of the following must be taken into account when calculating a user's effective rights to other objects in the tree? (Choose 2.)
The correct answer is A. Rights assigned to Public. B. Groups the user is a member of. A user's effective rights in eDirectory are the sum of all rights granted directly and indirectly, including rights granted to the [Public] trustee and to any groups the user belongs to.
Question
Options
- ARights assigned to Public.
- BGroups the user is a member of.
- CObjects that are trustees of the user object.
- DRights assigned to the server the user logs into.
- ERights assigned to other objects in the user's container.
How the community answered
(26 responses)- A85% (22)
- C4% (1)
- D4% (1)
- E8% (2)
Why each option
A user's effective rights in eDirectory are the sum of all rights granted directly and indirectly, including rights granted to the [Public] trustee and to any groups the user belongs to.
Rights assigned to [Public] apply to every object in the eDirectory tree, including unauthenticated users, so they are always factored into any user's effective rights calculation.
When a user is a member of a group that has been granted trustee assignments, those rights flow to the user and must be included when calculating effective rights.
Objects that are trustees of the user object hold rights over the user object itself; they do not grant rights to the user to access other objects in the tree.
The server a user logs into does not grant or modify that user's eDirectory object rights; server assignments are separate from directory trustee assignments.
Rights assigned to other objects within a user's container are held by those objects, not inherited by the user; only rights explicitly granted to the user, their groups, or [Public] affect effective rights.
Concept tested: Calculating effective rights in Novell eDirectory
Source: https://www.novell.com/documentation/edirectory88/edir_admin/data/fbachggc.html
Topics
Community Discussion
No community discussion yet for this question.