Re: NTFS folder permissions - Creator Owner issue (I think)




"F Laufs" <FLaufs@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:77E028E8-8366-4069-A32A-F71710489B04@xxxxxxxxxxxxxxxx
> Hi all,
>
> I need to set up the permissions on a folder so that:
>
> For users in Group 1:
> Anyone can create a file or subfolder.
> Anyone can edit any file.
> Anyone can copy and paste any file or subfolder.
> Only the owner can, delete, rename or move a file or folder
> Anyone can view permissions
> Noone can change permissions or take ownership
>

I doubt that that combination can be attained.
The issue is in that some files are changed by use of a temp
file that is renamed with the original deleted.

> For users in Group 2:
> They can create, edit, copy and paste, delete, rename or move any file
> or folder, and view permissions.
> They can not changer permissions or take ownership
>
> For Group 1, I ticked R&E, List, R and W in basic settings, and then added
> a
> Creator Owner group to which I gave modify rights. This got me pretty
> close
> to what I need, except:
>
> (1) when trying to move a file or folder, an error message appears as
> expected for the file, but the folder error message says '...cannot
> copy...'
> and then copies just the folder. I suppose it doesn't actually move it
> but
> this will be confusing for the users
>
> (2) test user can change the permissions on own folders, definitely what I
> don't want. (On checking the advanced permissions it explicitly shows that
> change permissions is NOT ticked)

The owner can always change permissions even when they are not
granted the permission to change permissions or denied it. Think of
the permission to change permissions as something only important
for non-owners.

>
> For permission set 2 I was thinking of giving Modify permissions but,
> again,
> this allows users to change permissions on their own folders.
>

It is not the Modify grant that allows this but being owner that does.

> I wonder if there is a simple explanation?
>
> Regards
>
> Fiona Laufs
>


.



Relevant Pages

  • Re: Dont Administrators have access to everything?
    ... folder, which the Limited users getaccess to. ... One of the Administrators is the Owner of nearly every ... the few that can be opened, but I thought the Administrators ... If you're an admin and you take ownership, and you replace permissions, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Lets talk about ownership!
    ... They will have the same permissions but the permissions are meaningless as there is no user to match. ... According my previous example the user "Terry" has read/write permissions on folder NickData. ... Ownership doesn't really matter as long as you have permissions. ... XP can be configured in Local Security Policy to make the Admin group the owner for files created by admins. ...
    (microsoft.public.windowsxp.general)
  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The fact that the tech support is based in India has nothing to do with the ... If so you may want to leave this folder alone. ... down to all children folders because i can set those permissions to ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The only computers i fix are my own. ... If so you may want to leave this folder alone. ... it includes all subdirectories with inherited permissions. ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)