Microsoft KB Archive/244710

= List of the privileges that are required in a Novell NetWare network to run Word =

Article ID: 244710

Article Last Modified on 1/25/2007

-

APPLIES TO


 * Microsoft Office Word 2007
 * Microsoft Office Word 2003
 * Microsoft Word 2002 Standard Edition
 * Microsoft Word 2000 Standard Edition

-



This article was previously published under Q244710



SUMMARY
This article lists the network privileges you have to have to perform specific Microsoft Word operations over a Novell network. The article includes the following sections:
 * Description of File System Directory and File Privileges
 * Novell Privileges that are Required to Only Read Documents
 * Novell Privileges that are Required to Create or to Modify Documents
 * Symptoms of Missing Novell Privileges
 * Why Novell Features File Scan as Well as Create Privileges



Description of File System Directory and File Privileges
File system security is basically the same for both Novell NetWare 3.x and Novell NetWare 4.x. A few new file attributes were added to Novell NetWare 4.x to accommodate data migration and some file compression features.

Directory privileges control general access to a directory, its files, and its subdirectories. When granted at the directory level, the privileges apply to all the files and subdirectories in that directory unless the privileges are redefined at the file or subdirectory level.

File privileges control access to specific files in a directory. They are used to redefine the privileges that users inherit from directory privileges.

There are eight privileges that can be granted at either the directory or the file level. The following is a list of Novell file system privileges.

If you make a trustee assignment in a directory, the trustee has access to the directory, its files, and its subdirectories (unless the privileges are redefined at the file or subdirectory level).

When you make a trustee directory assignment, the default privileges (Read and File Scan) allow a trustee to read the files in the directory and to see the subdirectories and files in the directory. Any trustee assignment, whether for a directory or a file, also includes the privilege to see the path leading from the root to that directory or file. A new assignment of trustee privileges at the file level can revoke privileges assigned at the directory level or allow additional privileges.

Novell Privileges that are Required to Only Read Documents
READ, FILE SCAN

Below is a list of directories where users need only Read and File Scan privileges to run Word (they only need to be able to read from these directories):
 * Server location of Word program directory tree (Administrative installation)
 * Server location of shared Microsoft applications (MSAPPS) directory tree (Administrative installation)
 * Windows program directory, if running shared Windows
 * Any server directories where you store graphics or other source files for links that you do not want users to be able to modify in Word.

Note In addition, you need to apply Read-Only and Shareable Flags to all the files in these locations. Usually, the Novell network administrator sets this sequence of privileges and attributes after performing the server installation of Windows or an application.

Novell Privileges that are Required to Create or Modify Documents
READ, WRITE, FILE SCAN, CREATE, ERASE, MODIFY (all rights except ACCESS CONTROL and SUPERVISOR)

Important These user rights apply to the directory that contains the files you are working with. Novell NetWare also allows for assigning users file level rights. Make sure the FILE SCAN right is also assigned at the file level. This is especially important when users with Trustee rights are working with documents within the same directory.

For example: If one user opens a document, Word creates a temporary file with a name similar to "~wrd0000.tmp". When a different user with Trustee rights opens a different document, their session of Word may also create a temporary file with the same file name. This may occur when the Trustee does not have the file level right of FILE SCAN assigned. When the FILE SCAN right is missing, Word cannot "see" the other temporary files that may exist in the directory.

Note NetWare version 2.x also uses OPEN and uses DELETE and SEARCH instead of ERASE and SEARCH, respectively.

The following is a list of directories where users need these privileges to run Word:
 * The workstation's Word program directory tree, if it is located on the server.
 * Temporary directory, if it is located on the server.
 * Any server directories where the user stores documents.
 * Any server directories where source files for links are located that the user needs to modify (for example, Microsoft Excel worksheets or charts).

Note: The files in these locations usually have no Flags assigned, which means the user has complete access to them.

Why Novell Features File Scan as Well as Create Privileges
If you have Create privileges but not File Scan privileges, you can create files or copy them to a directory, but you cannot view the directory. This means that, under Novell, you can create a "drop directory" where you can collect files (such as reports or logs) from many users that cannot be read by those same users.

If you have Create privileges but not File Scan privileges in a directory where you want to create Word documents, a large number of .tmp files quickly accumulate.

Additional query words: novell extra rights privilege permissions privileges permission mspress wrk install filescan setup exe WD2000 WD2002 WD2003 WD2007

Keywords: kbexpertisebeginner kbsavefile kbopenfile kbsecurity kbnetwork kbinfo KB244710

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.