Novell Doc: How Filr Works–Overview Guide - Rights to Files and Folders

4.6 Rights to Files and Folders

Filr users must have the required rights to access files and folders through Filr.

Section 4.6.1, Access Is Always Controlled by the File System

4.6.1 Access Is Always Controlled by the File System

As already explained, access through Filr involves one of four possible roles.

For users to have Viewer, Editor, or Contributor rights through Filr, they must have the minimum rights that those roles require, as outlined and illustrated in the following sections.

Filr Roles and NSS File System Trustee Rights

For eDirectory users to function in Filr roles, they must have the NSS rights illustrated and explained in Table 4-2.

Table 4-2 NSS File System Rights Required for Filr Roles

Role and Minimum NSS Rights Required	Comments
	Read and File Scan are the minimum file system trustee rights that users must have to view files and folders.
	If the Write file system trustee right is added to Read and File Scan, users can then modify file content.
	To perform contributor functions, users must either have all file system trustee rights to the file or folder (except for Access Control) or the Supervisor right to the file or folder. You might ask why Access Control isn’t listed. That is because it has no effect. Although users can provide access for other users through Filr sharing, that functionality is enabled by the file system rights of Net Folder proxy users. Filr shared access is independent of any file system rights that users have or do not have.

Role and Minimum NSS Rights Required

Comments

Read and File Scan are the minimum file system trustee rights that users must have to view files and folders.

If the Write file system trustee right is added to Read and File Scan, users can then modify file content.

To perform contributor functions, users must either have all file system trustee rights to the file or folder (except for Access Control) or the Supervisor right to the file or folder.

You might ask why Access Control isn’t listed. That is because it has no effect.

Although users can provide access for other users through Filr sharing, that functionality is enabled by the file system rights of Net Folder proxy users.

Filr shared access is independent of any file system rights that users have or do not have.

Filr Roles and NTFS Permissions

For Active Directory users to function in Filr roles, they must have the NTFS file system permissions illustrated and explained in Table 4-3.

Table 4-3 NTFS Permissions Required for Filr Roles

Role and Minimum NTFS Permissions Required	Comments
	Read, Read & Execute, and List Folder Content are the minimum basic permissions that users must have in order to view files and folders. The default special permissions associated with these basic permissions are also required.
	If the basic Write permission is added, users can then modify file content. The default special permissions associated with these basic permissions are also required.
	To perform contributor functions, users must either have the basic Modify permission added, or they must have the basic Full Control permission. The default special permissions associated with these basic permissions are also required.