Permission Question

[Adam Raff]

Good Day,

I have a permission question that I feel I know the answer, but I want to
make sure that there is no other way around this that I may not be aware of

Prodcommg folder on Testserver
Bryan folder - Full rights to Bryan plus inherit
Carlos folder - Full rights to Carlos plus inherit
Sue folder - Full rights to Sue plus inherit
-------------
Common Production folder (CPF) - inherit rights Plus Mary and Eve
has full rights
template CG - inherit from CPF plus CG has full rights
Template CK - inherit rights from CPF plus CK has full rights
Template SC - inherit rights from CPF plus SC has full rights
2005 folder - inherit rights from CPF Mary and Eve
2006 folder - inherit rights from CPF Mary and Eve
Template SC - Copied from Common Production folder
Template CK

As you can see from my example above in Common Production folder we have two
(Mary and Eve) users that have full or modify rights from that folder and
below via inherit permissions.

When Mary copies the template of SC to the 2006 folder, the rights also copy
over so that SC can access the folder so he can add or delete files. CK
would not be able to access SC folder since he would not have the proper
rights.

Since Mary has full rights she can copy the folder with no issue into the
2006 folder because of inherit rights. SC would not be able too, since SC
does not have full/modify rights to the 2006 folder.

Once Mary copies SC Template over to the 2006 folder, then SC can enter and
modify data within that folder because the permission are copied with the
folder.


My question with the above example is as follows

Is there a way that we can have SC copy her template over to the 2006 folder
with out giving her full rights. We do not want SC to view or look into any
other folder except her own template?

My gut feeling is No, but I may be wrong and there may be another way with
advanced permissions of which I do not use that much.

Thanks
Adam Raff

 

[Vincent Xu [MSFT]]

Hi ,

Actually:

When a file is copied from one location to another location, whether on the
same or different volume, a new file is created in the destination
location. The file inherits the permissions, the Access Control List (ACL),
from its parent folder.

When a file is moved from one location to another on the same volume, the
file retains its security descriptor. Only the pointer to the resource is
modified.

When a file is moved from one location to another on a different volume, it
acts similar to the copy, except the file is deleted from the source
location. The moved file inherits the permission from the parent folder.

Hope the information helps.

Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------

 

[Adam Raff]

Thanks for your response on this topic,

What you told me helped a little as it made some sense out of something's.
My big issue is, there a way for a person who has rights from one folder
such as Template, can that person copy into a another folder where they have
no rights to copy at all.

That is what my problem is, I would like to allow them to copy say a folder
yet not give them the rights to look into other folders. We have a lot of
folders that these managers will be creating and then moving into the 2006
folder. I have two users who have modify rights but it would be easier if
the manager can move the folder there themselves with out the two users
doing it.

Thanks
Adam Raff

 

[Vincent Xu [MSFT]]

Hi Adam,

-- there a way for a person who has rights from one folder
--such as Template, can that person copy into a another folder where they
have
--no rights to copy at all.

IMHO, this doesn't make sense. You must give him the rights to copy if you
want him able to copy.



Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------

 

[Adam Raff]

Hi Vincent,

Thanks, I just wanted to make sure that I am not missing some trick that
somebody may share. Per my email we have created templates and we have
given the users in question rights to those folders so that we can copy the
folder and they can keep the rights.

What the issue was and as I said I felt that I new the answer but I wanted
to make sure, was that the people that be wanted the user to copy the folder
into the 2006 directory of which they did not have the rights to copy the
folder. Once the folder is copied by a user with rights then the rights
will move over with the copy and the user can then work with the folder in
the 2006 directory.

I just wanted to make sure that I was not missing something which is why I
posted this email.

Thanks for your help and your confirmation on this.

Adam Raff

 

[Vincent Xu [MSFT]]

Hi Adam ,

Thanks for your reply.

I know your mean and I'm glad to provide information.

Have a good day!


Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------