Re: NTFS Permissions Question

From: Adam Leinss (aleinss_at_techie.com)
Date: 02/04/05 

Date: Fri, 04 Feb 2005 00:37:30 GMT

blastingfonda@gmail.com wrote in
news:1107470999.091325.292670@z14g2000cwz.googlegroups.com:

>... if a user is granted
> Modify permission, he cannot delete files or subfolders unless
> explicitly granted the Delete permission.

> ... when I look at the ACL
> on the Test folder, I notice TestUser's Modify permission is
> inherited from the Modify folder -- and of course that includes
> the ability to Delete.

You seem to be saying two completely different things here about what
the modify permission allows you to do. I believe the permissions are
additive and work like this:

Modify rights only: can modify files or folders, but not delete them

Delete rights only: since you cannot modify files or folders, you can
not delete them (deletion would be a modification would it not?)

Modify + Delete rights: you can both modify and delete files

Adam

Relevant Pages

  • Re: read,modify permissions
    ... modify a particular folder/file but deny them the ability ... Modify allows them ... : adding/deleting folders and files. ... Rights assigned to a file affect that file. ...
    (microsoft.public.windows.server.general)
  • Re: Is granting Modify permission on root folder secure?
    ... Granting modify shouldn't be a problem as long as your code is the only ... So you probably wouldn't be opening a security hole, ... I generally grant modify unless I'm ... To avoid a permission denied> error, I had to grant the app's root directory Modify permission (using> the ...
    (microsoft.public.inetserver.asp.components)
  • Re: Keeping users from moving files out of a specific folder
    ... Tweakui to modify the "distance" a folder would have to be moved via the ... > included with modify permission. ...
    (microsoft.public.win2000.security)
  • Re: User rights.
    ... > all permissions and rights granted to any and all groups ... >From this I think I can infer that I am a member of both the administrator ... group as well as the user group and as such denying delete rights to the ... Keep in mind that modify includes delete. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Modify default replication wait period in ADAM
    ... This posting is provided "AS IS" with no warranties, and confers no rights ... > Use of included script samples are subject to the terms specified at ... >> I am trying to find out how to modify the default amount of time an ADAM ... > instance waits to push a directory change to a member of a replica set. ...
    (microsoft.public.windows.server.active_directory)
Loading