Re: Setting ACL on directory with files

From: Amit Rahul [MS] (arahul_at_online.microsoft.com)
Date: 03/24/04 

Date: Tue, 23 Mar 2004 22:53:34 -0800

Which API are you using to set ACE on the folders? If you use
SetSecurityInfo() on Windows XP/2000 for setting the objects DACL/SACL, the
system propagates all inheritable ACEs to existing child objects. Check out
MSDN (http://msdn.microsoft.com) for more information on using this API. 

-- 
Thanks,
Amit Rahul [MS]
This posting is provided "AS IS" with no warranties, and confers no rights.
"Michal Januszczyk" <anonymous@discussions.microsoft.com> wrote in message
news:20B0E5BF-A410-4B9A-B59E-17295D002CDC@microsoft.com...
> I have the following problem:
>
> I try to set some ACEs on a folder with files. The ACEs are set properly.
> The ACEs define flags CONTAINER_INHERIT_ACE and OBJECT_INHERIT_ACE so that
> access to files inside the folders would be affected by the parent
folder's ACEs.
>
> If new file is created in the folder, its ACEs do reflect settings set
> on the parent containers. However, the files that had existed before I
> set the permissions for the folder do not reflect the parents settings.
>
> How can I force existing elements of the folders to aquire ACEs of
parents'
> (of course only these that are applicable).
>
> I noticed, that when I set permission for some folder with windows
explorer,
> it automatically sets ACEs on recursive subfolders and contained files.
> (I mean that it not only makes changes to the super folder ACL but also
> to ACLs of subfolders and files, that are affected by the folder settings)
>
> Should I in my program do this recursively for each sub directory/file ?
>
> Thanks
> Michal Januszczyk

Relevant Pages

  • Re: Confusion over IO (Inherit Only) ACE on Vista
    ... Earlier we discussed how default folder permissions created by FORMAT.EXE consist of two ACEs per group - one to set the explicit ACE, and one to control the inheritance of child objects. ... but shows ACE's on child folders with the flag set. ...
    (microsoft.public.platformsdk.security)
  • Setting ACL on directory with files
    ... I try to set some ACEs on a folder with files. ... access to files inside the folders would be affected by the parent folder's ACEs. ... set the permissions for the folder do not reflect the parents settings. ...
    (microsoft.public.platformsdk.security)
  • Re: Default Permissions
    ... When you look using the advanced view you see all ACEs in the ACL ... folder, ... carry no permissions on the contained files. ...
    (microsoft.public.security)
  • Re: Help Urgently Required
    ... folder click on the advanced button, ... of the listed grants (ACEs) and click on edit. ... StuGrp list on the parent directory of the student folders ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Browser lost its memory
    ... and on the Folder Options Click on View Tab. ... Remember each folder's view settings. ... History settings for keeping the history is set say for 30 days (you can make ... Temorary Internet Files ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
Loading