User with Read-Only can rename folder

From: Jeff Peter (cifs445_at_msn.com)
Date: 10/17/03


Date: Fri, 17 Oct 2003 11:14:15 -0700

We have an odd permissions issue. With the following share and dir perms, a
member of the User group can rename a folder on one share volume from the
same server, but not in another.

Share: Projects
Permissions: Admins F, Guests R, Users C

A single folder in the Projects Share has the following dir perms applied

Folder: ProjectStartupFiles
Permissions: Admin F, Users R

Now, from what I remember, dir perms are the sum of the least restrictive
and when compared with share perms, the most restrictive of the two applies.
Therefore a member of the users group would have RO rights to the
ProjectStartupFiles folder, correct? In this case a member of the User
group can rename the restricted folder. Ironically, this is not a problem
with a similar setup with a different share on the same server.

I'm just trying to figure out whether I'm losing it and should pursue
another profession... (no comments please).



Relevant Pages

  • Re: Unable to remove Read-Only attribute from folder
    ... > write files to the folder. ... The only thing I can think of is that perhaps the permissions on the ... folder are set for a particular user group ... and the user who can't write to it isn't a member of that group. ...
    (microsoft.public.security)
  • Re: login script for group
    ... I created a group in ICS Students called Geometry ... one group and all groups will have at least one teacher member. ... on the server/domain/scripts folder. ... Dim strGroupDN, objGroup ...
    (microsoft.public.windows.server.active_directory)
  • Re: login script for group
    ... I created a group in ICS Students called Geometry ... one group and all groups will have at least one teacher member. ... on the server/domain/scripts folder. ... Dim strGroupDN, objGroup ...
    (microsoft.public.windows.server.active_directory)
  • RE: DFS-R: Data Wiped Out from Filestore Folder
    ... It's the PreExisting folder I should have been talking about. ... Primary Server only take effect during the initial replication. ... Once the replicated folder on the upstream member changes to normal state, ...
    (microsoft.public.windows.file_system)
  • RE: DFS-R: Data Wiped Out from Filestore Folder
    ... involved setting the primary member with the dfsradmin command. ... It seems to contain the files and folder names with GUID appended.. ... Any local pre-existing content in this replicated folder that does not ... Server1 and Server2 are the members of the replication group. ...
    (microsoft.public.windows.file_system)