I'd trying to limit the rights my network group has, as they seem to like to
create subnets wherever in the tree they feel like it. I followed TID
10059206 and assigned the following rights:
Locator Object: Object = Browse All Properties = Read, Compare
Container for Subnet Objects: Object = Browse All Properties =
Supervisor, Compare, Read, Write, Add Self
DHCP Server Object: Object = Browse All Properties = Read, Compare

Apparently this isn't enough, as when they open iManager and select
"View/Modify IP Address" they get the following iManager error:
java.lang.NumberFormatException: For input string: \"\"\r\n at
java.lang.NumberFormatException.forInputString(Num berFormatException.java:48)\r\n
at java.lang.Long.parseLong(Long.java:415)\r\n at
java.lang.Long.parseLong(Long.java:452)\r\n at
com.novell.imanage.dnsdhcp.Locator.getSubnetStartE ndAddresses(Locator.java:217)\r\n
at
com.novell.imanage.dnsdhcp.ModifyIPAddressTask.sho wSubnets(ModifyIPAddressTask.java:510)\r\n
at
com.novell.imanage.dnsdhcp.ModifyIPAddressTask.sho wInitialForm(ModifyIPAddressTask.java:438)\r\n
at
com.novell.imanage.dnsdhcp.ModifyIPAddressTask.exe cute(ModifyIPAddressTask.java:137)\r\n
at com.novell.emframe.dev.Task.execute(Task.java:490) \r\n at
com.novell.nps.gadgetManager.BaseGadgetInstance.pr ocessRequest(BaseGadgetInstance.java:849)\r\n
at
com.novell.nps.gadgetManager.GadgetManager.delegat eToGadget(GadgetManager.java:4243)\r\n
at
com.novell.nps.gadgetManager.LaunchService.onDeleg ateAction(LaunchService.java:88)\r\n
at sun.reflect.NativeMethodAccessorImpl.invoke0(Nativ e Method)\r\n at
sun.reflect.NativeMethodAccessorImpl.invoke(Native MethodAccessorImpl.java:39)\r\n
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(De legatingMethodAccessorImpl.java:25)\r\n
at java.lang.reflect.Method.invoke(Method.java:324)\r \n at
com.novell.nps.gadgetManager.BaseGadgetInstance.ha ndleAction(BaseGadgetInstance.java:2362)\r\n
at
com.novell.nps.gadgetManager.GadgetManager.process InstanceRequest(GadgetManager.java:1596)\r\n
at
com.novell.nps.gadgetManager.GadgetManager.process ServiceRequest(GadgetManager.java:1052)\r\n
at
com.novell.nps.PortalServlet.handleFrameService(Po rtalServlet.java:496)\r\n
at com.novell.nps.PortalServlet.processRequest(Portal Servlet.java:369)\r\n
at com.novell.nps.PortalServlet.doPost(PortalServlet. java:275)\r\n at
javax.servlet.http.HttpServlet.service(HttpServlet .java:716)\r\n at
com.novell.emframe.fw.servlet.AuthenticatorServlet .service(AuthenticatorServlet.java:274)\r\n
at javax.servlet.http.HttpServlet.service(HttpServlet .java:809)\r\n at
org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java:200)\r\ n
at
org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:146)\r\n
at
org.apache.catalina.core.StandardWrapperValve.invo ke(StandardWrapperValve.java:209)\r\n
at
org.apache.catalina.core.StandardPipeline$Standard PipelineValveContext.invokeNext(StandardPipeline.j ava:596)\r\n
at
org.apache.catalina.core.StandardPipeline.invoke(S tandardPipeline.java:433)\r\n
at org.apache.catalina.core.ContainerBase.invoke(Cont ainerBase.java:948)\r\n
at
org.apache.catalina.core.StandardContextValve.invo ke(StandardContextValve.java:144)\r\n
at
org.apache.catalina.core.StandardPipeline$Standard PipelineValveContext.invokeNext(StandardPipeline.j ava:596)\r\n
at
org.apache.catalina.authenticator.AuthenticatorBas e.invoke(AuthenticatorBase.java:504)\r\n
at

(Sorry, just realized it isn't complete but hopefully it's enough)
I think I'll have to assign additional rights to allow them to create or
delete subnets in that container, correct?
I don't want them to create or delete DHCP servers, just be able to stop and
start them.