I'm fairly certain I know the answer, but want some other opinions:

Given NSS file system on OES11 SP2, if someone asked you:
who has rights to directory XYZ


Show me everything user jsmith has access to

Wouldn't File Reporter be the best (and pretty much only) option in this case?

I mean the old nwadmn32 "effective" rights could work, but you'd have to find each user object individually and each directory individually.

Right-clicking with the Novell Client will only work so far for Explicit and Inherited rights, it doesn't enumerate groups, and if you have 6,000 user accounts and 50 file servers, and millions of directories, let's just say that time consuming is an understatement.