Permissions not working as they should....

[Guest]

confused......

I am setting ACLs for a specific folder but the settings don't appear to be
working.

I am setting a user to deny everything access on the folder.
I also have a group set with full browse options.

The denied user can still web browse the folder and files afterwards.

My understanding is the ACLs override all other security settings web etc?

I took off inherit permissions.

Any ideas where I could be going wrong?

Thanks in hope.

 

[Roger Abell]

An access is made under the context of one account only.
An ACL that has Deny Full for Grp1, and Grant Read/Execute
for Grp2, will not allow any access by an account in Grp1
even if it is in Grp2.
You said "web" toward the end. I suspect that the access
is being made by the accounts used by the webserver rather
than by the account you are attempting to deny.
How is the account accessing the files?