Re: XP file security issue - deletion is possible
From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 05/26/04
- Next message: Roger Abell: "Re: Can I use Isolation of FTP User with XP and IIS 5.1"
- Previous message: /\\/\\UF/-\\S/-\\: "Re: norton anti virus & windows XP"
- In reply to: david: "XP file security issue - deletion is possible"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 26 May 2004 02:45:48 -0700
This is because the account you are using has a grant
of Full Control on the containing folder.
Due to Posix compliance requirements Full Control confers
this "hidden delete" over container contents. To change,
use the adv view on the ACE in the NTFS permissions of
the containing folder, and in that advanced view uncheck
the grant of Delete subfolders and files
-- Roger Abell Microsoft MVP (Windows Server System: Security) MCSE (W2k3,W2k,Nt4) MCDBA "david" <dlacote@msn.com> wrote in message news:121f001c4426e$be8b1c00$a001280a@phx.gbl... > On an XP machine, on an NTFS drive, I create a file. > I then modify the permissions on this file : I disable > inheritance, I remove all lines and add myself and give > Read & Execute permissions only. > > Why am I still able to delete the file ? > Even when I logout / log back on again. > I'm the owner of the file, the effective permissions > show "read only". > > Thanx > > David
- Next message: Roger Abell: "Re: Can I use Isolation of FTP User with XP and IIS 5.1"
- Previous message: /\\/\\UF/-\\S/-\\: "Re: norton anti virus & windows XP"
- In reply to: david: "XP file security issue - deletion is possible"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|