User with Read-Only can rename folder
From: Jeff Peter (cifs445_at_msn.com)
Date: 10/17/03
- Next message: David Ross: "Re: VALIDATION PROCEDURE - Microsoft Security Bulletin - BEGIN PGP SIGNED MESSAGE"
- Previous message: Arjuna: "W2K/IIS5 Server Reboots"
- Next in thread: Steven L Umbach: "Re: User with Read-Only can rename folder"
- Reply: Steven L Umbach: "Re: User with Read-Only can rename folder"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 17 Oct 2003 11:14:15 -0700
We have an odd permissions issue. With the following share and dir perms, a
member of the User group can rename a folder on one share volume from the
same server, but not in another.
Share: Projects
Permissions: Admins F, Guests R, Users C
A single folder in the Projects Share has the following dir perms applied
Folder: ProjectStartupFiles
Permissions: Admin F, Users R
Now, from what I remember, dir perms are the sum of the least restrictive
and when compared with share perms, the most restrictive of the two applies.
Therefore a member of the users group would have RO rights to the
ProjectStartupFiles folder, correct? In this case a member of the User
group can rename the restricted folder. Ironically, this is not a problem
with a similar setup with a different share on the same server.
I'm just trying to figure out whether I'm losing it and should pursue
another profession... (no comments please).
- Next message: David Ross: "Re: VALIDATION PROCEDURE - Microsoft Security Bulletin - BEGIN PGP SIGNED MESSAGE"
- Previous message: Arjuna: "W2K/IIS5 Server Reboots"
- Next in thread: Steven L Umbach: "Re: User with Read-Only can rename folder"
- Reply: Steven L Umbach: "Re: User with Read-Only can rename folder"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|