Network, Computer and Programming Resources

Network - IRM/IRF (Inherited Rights Mask/

Inherited Rights Filter) In environments for Novell NetWare 3.x, the IRM is a security measure that determines which trustee rights a user can carry over (inherit) from a directory into a subdirectory in the NetWare file system. The IRM does not grant any new rights (trustee rights the user does not already have). Rather, the IRM controls which of the trustee rights already granted in a parent directory can also be used in the current directory. The IRM does not take away trustee rights granted in a particular subdirectory. For example, if the IRM for directory X filters out all but the File Scan right, then a user with a Modify right in directory X will not be able to carry that right over to subdirectories of X. If, however, the user is granted a Modify right for subdirectory Y, then the IRM for X has no effect on that right. In NetWare 4.x, the inheritance mechanism is known as the Inherited Rights Filter (IRF). For files and directories, the IRF works the same way as the IRM. In addition, the IRF controls access to objects and properties in containers on the NetWare Directory Services (NDS) tree. Because the IRF can block Supervisor rights under certain conditions, it is wise to grant a trustee all rights that are appropriate, rather than granting just the Supervisor right. BROADER CATEGORY Access Rights NetWare 4.x: Inherited Rights Filter