Permissions on Shared Files

[Michelle T]

I was hoping someone could help me with an small issue
I'm having with assigning permissions to users.

This is my situation...

I have a shared folder on the network with a number of
subdirecotires (lets say one for each country) and I have
created groups of users for each of those country
folders. The problem I'm having is that I only want the
users to be able to view the folder for the country that
they're allowed to access (ie not to see all the other
subdirectories in the share, I've tried a number of
different permission settings including denying list
folder contents, but I keep getting access denied at the
top level shared folder.

Please can someone help me out, I'm going around in
circles, and I'm convinced I'm just missing something
simple.

Many Thanks in Advance for any help.

Reagrds

Michelle T

 

[Michael Bednarek]

I was hoping someone could help me with an small issue
I'm having with assigning permissions to users.

This is my situation...

I have a shared folder on the network with a number of
subdirecotires (lets say one for each country) and I have
created groups of users for each of those country
folders. The problem I'm having is that I only want the
users to be able to view the folder for the country that
they're allowed to access (ie not to see all the other
subdirectories in the share, I've tried a number of
different permission settings including denying list
folder contents, but I keep getting access denied at the
top level shared folder.

Please can someone help me out, I'm going around in
circles, and I'm convinced I'm just missing something
simple.

Can't be done this way with Microsoft Networking - Novell Netware can.

The only workaround I know is to directly map the relevant directory for
the users in question:

To share:
Net Share Australia=D:\Data\Countries\Australia

To use:
Net Use G: \\Server\Australia

The latter obviously requires wrapping in some sort of group membership
test, like ifmember.exe (Resource Kit) or InGroup (KiXtart).

Good luck.

 

[Michelle T]

Michael,

Thank you so much for getting back to me. I was afraid
that might be the case.

Many Thanks Again

Michelle

 

[Keith Langmead]

Yes that is possible (just tested it on our network here).

To do it, give all of the groups access to the root folder (NTFS and Share
permissions), then on each of the subfolders, go into the security (NTFS)
permissions on each folder, and de-select the 'Allow inheritable permissions
from parent to propagate to this object', so you can change the permissions.
Remove all of the groups except those you want to have access. Repeat with
each sub-folder.

You'll then find that each user can access the main share, and will see all
the sub-folders, but will get an access denied on all folders except the one
they've been given permissions to.

Keith

 

[Torgeir Bakken \(MVP\)]

Yes that is possible (just tested it on our network here).

To do it, give all of the groups access to the root folder (NTFS and Share
permissions), then on each of the subfolders, go into the security (NTFS)
permissions on each folder, and de-select the 'Allow inheritable permissions
from parent to propagate to this object', so you can change the permissions.
Remove all of the groups except those you want to have access. Repeat with
each sub-folder.

You'll then find that each user can access the main share, and will see all
the sub-folders, but will get an access denied on all folders except the one
they've been given permissions to.

Hi

Well, then Michelle is just as far, because the main goal was to *not*
see the sub-folders that the user did not have permissions to open.

 

[Keith Langmead]

Ahhh, good point, must have missed that part of her requirements. Sorry.

That'll teach me to answer any posts at the end of a long day at work.

Keith