User with Read-Only can rename folder

[Jeff Peter]

We have an odd permissions issue. With the following share and dir perms, a
member of the User group can rename a folder on one share volume from the
same server, but not in another.

Share: Projects
Permissions: Admins F, Guests R, Users C

A single folder in the Projects Share has the following dir perms applied

Folder: ProjectStartupFiles
Permissions: Admin F, Users R

Now, from what I remember, dir perms are the sum of the least restrictive
and when compared with share perms, the most restrictive of the two applies.
Therefore a member of the users group would have RO rights to the
ProjectStartupFiles folder, correct? In this case a member of the User
group can rename the restricted folder. Ironically, this is not a problem
with a similar setup with a different share on the same server.

I'm just trying to figure out whether I'm losing it and should pursue
another profession... (no comments please).

 

[Steven L Umbach]

I would double check that the permissions are exactly the same on both shares for
ntfs permissions. Be sure to check ntfs advanced permissions of the folder you are
having a problem with. Settings there are not always apparent from the main security
properties page. You may also want to change share permission to read if users are
supposed to have only read for ntfs permissions also. Of course share permissions
only apply to network access. --- Steve