Re: Need help setting a special permission
- From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 5 Dec 2005 21:43:24 -0600
Write permission for the file might allow a user to alter a file if in the
process the application does not delete the original file. In that case the
user would be using his append data/write data permission. The link below
explains special permissions. What I would try is to give the user/group
read/list/execute permissions on the general security page which is for
folder, subfolders, and files. Then in special permissions add the
user/group again and select the two permissions for create files and create
folders and for the "apply onto" box select folders and subfolders only. The
user however would be able to modify his own files because the owner would
be given permissions shown for creator owner which by default is full
control. FYI when you see a two part permission such as Create Files/Write
Data, the permission before the / applies to folders only and the permission
after the / applies to files only. --- Steve
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419
Create Files/Write Data
The Create Files permission applies only to folders and allows or denies the
user from creating files in the folder.
The Write Data permission applies only to files and allows or denies the
user from making changes to the file and overwriting existing content by
NTFS.
Create Folders/Append Data
The Create Folders permission applies only to folders and allows or denies
the user from creating folders in the folder.
The Append Data permission applies only to files and allows or denies the
user from making changes to the end of the file but not from changing,
deleting, or overwriting existing data .
"XxLicherxX" <goldhors64@xxxxxxx> wrote in message
news:1133812308.605223.160910@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Hello everyone,
>
> I need help setting up special permissions to work in the following
> way: I have a user who I want to have read access to the folder. This
> user should also have the ability to create files/folders, but not
> modify the contents of a file/folder or delete the file/folder, unless
> that the user created the file/folder.
>
> I have attempted to do it this way:
>
> I gave the user the following "allowed" permissions:
>
> Read and Execute
> List Folder Contents
> Read
> Write
>
> I did not place a check mark next to:
> Modify
> Full Control
>
> However with these permissions, the user can still open any file in the
> directory, regardless of who created it, change something and then save
> it. Now correct me if I am wrong, here, isn't that "modifying" the
> file? This is something the user should not be allowed to do (and
> doesn't have permissions to do). What is the difference between "Write"
> and "Modify"?
>
> When I try denying the "Modify" ability, I it also denies the "Write"
> ability.
>
> I went into the special permissions and saw something called "Create
> Folders/ Append Data".
> This looks like it would work, execpt I still need to allow the user
> the ability to create folders. Why would these two things be grouped
> together?
>
> Thanks
>
> Dave
>
.
- Follow-Ups:
- Re: Need help setting a special permission
- From: XxLicherxX
- Re: Need help setting a special permission
- References:
- Need help setting a special permission
- From: XxLicherxX
- Need help setting a special permission
- Prev by Date: Re: Can't Ping My Own IP Address
- Next by Date: Re: XP Firewall & Linksys WMA11B Media Adapter
- Previous by thread: Need help setting a special permission
- Next by thread: Re: Need help setting a special permission
- Index(es):
Relevant Pages
|
