Mike said:
Good morning,
I have a folder that is shared througout my work. I
have a access database that is in it and shared. I would
like to be able to have the individuals create files in
the folder, but have read-only access to the access
database. Can someone please explain to me what
permissions I need to allow and deny. Thank you for your
time.
First you need to separate: Share from Directory from File permissions.
Many people lump "share and directory" permissions under the term "Folder"
but that isn't a useful method for Administrators and advanced users.
'Folder'
is intended to hide the details from the NAIVE users.
Share permissions must be set (for those groups) to at least everything you
MIGHT want them to do, e.g., Change in order to add, delete and modify
SOME files.
Then if you separate the NTFS permissions into "directory" and "files", set
the
permissions DIFFERENTLY. (Almost all beginners, almost always set these
the same.)
Set the defaults and propagate to all file (say, READ-Execture)
Then go back to the directory and set the directory to Modify (add things)
BUT
DO NOT propagate.
This way the directory allows adding stuff but the existing files (like the
database)
does not allow changing it. This might be a problem with Access though
because
last I checked Access "changes the file (internal dates)" just to open it.
You can also revisit any existing FILES which need to be made "writeable."
One method is to make sure each, directory and existing file is marked "Full
Control
for the Creator/Owner".
Be careful.
