🚀 go-pugleaf

zonk@albany.net (Joshua Vaughn) wrote:


>1)  EVERYONE has access to SYS:DATA   [R W E C F M]
>2)  Our departments each have thier own GROUP DIR under SYS:DATA;
>     (ie.  SYS:DATA\EXEC;  SYS:DATA\ADMIN)
>     Each GROUP DIR has it's own corresponding NETWARE GROUP
>     Each NETWARE GROUP gets a trustee assignment of [R W E C F M]
>     to it's corresponding GROUP DIR   
>     Each GROUP DIR has an IRM at it's head which blocks all rights to
>     other users/groups
>NOTE:  NETWARE GROUP EXEC must have [R F] to all GROUP DIR's
>             and USER DIR's
>3)  Every user has a USER DIR in thier appropriate GROUP DIR with the
>     [S] right to thier own directory
>    Peer users get NO rights to other users directories
>    Department heads get [R F] to other users USER DIR's in thier     
>    GROUP DIR
>    In the event there is more than one dept head in a group,  the
>    second manager get's the [R F] assignments in USER DIR's 
>    of thier subordinates,  NO rights in the first managers directory

Consider the following modifications:
1. Create the directories F:\GROUPS and F:\USERS
2. Under each create department directories like F:\GROUPS\ADMIN and
F:\USERS\ADMIN
3. Create a directory for each user in his department under F:\USERS
4. Create a director F:\GROUPS\COMMON

Then allocate these rights:
1. SRWCEMFA to the EXEC group for F:\GROUPS and F:\USERS
2. RWCEMF to EVERYONE for F:\GROUPS\COMMON
3. RWCEMF to each Group for its directory under F:\GROUPS
4. RF to each Dept. head for his group's directory under F:\USERS
5. SRWCEMFA to each user for his personal directory in F:\USERS
6. An IRM of SA for Department Head user directories if there are two
department heads

This scheme is simpler to implement and requires less fiddling with
IRMs to achieve basically the same result. If you set up two drive
mappings (say, G: for the group and H: for the user's home) there
should be no loss of convenience for having split the data directory
into two arms.

I'd appreciate your opinion since we're looking at having to do a
similar reshuffle at our site sometime soon.

-Matthew