Re: Permissions Inherited Despite Being Set Otherwise

Hi Robert:

Thanks for much for your patience and pervaverence on this issue! I apologies for the delayed response.

The notes you made make a lot of sense. Is it safe to assume then that for document3, user3 has Read access (granted explicitly) and user1 and user2 have "list" access only, inherited (i.e. they can see that the file exists, but they cannot open it)?

Thanks!

Simon


"Robert Zhao [MSFT]" <v-rozhao@xxxxxxxxxxxxxxxxxxxx> wrote in message news:$NfiCIilHHA.4356@xxxxxxxxxxxxxxxxxxxxxxxxx
Hello Simon,

Thanks for your patience.

I've done the same tests as you told, and I got the same result.

When I try to check the permission on the second document, the user1 we
added in the first document has "Limited Access" permission on it. Both
user1 and user2 have "Limited Access" permission to document3. Per my
understanding, it is very normal. Let look at the following change list:

1. For the Document Library, we remove all the groups but leave Group1 full
control.
(Group1 has full control permission on the Document Library)

2. We upload docuemnt1.
(Group1 has full control permission on the Document Library.
Group1 has full control permission on document1.)

3. We add user1 Design permission to document1.
(Group1 has full control permission on the Document Library.
Group1 has full control permission on document1.
User1 has Design permission on docuemnt1.
In the meanwhile, user1 is granted Limited Access permission to the
Document Library. If no the permission, how can user1 view any document in
Document Library? So that's the point.)

4. We upload document2.
(Group1 has full control permission on the Document Library.
Group1 has full control permission on document1.
User1 has Design permission on docuemnt1.
User1 has Limited Access permission to the Document Library.
User1 inherits Limited Access permission from Document Library, so user1
has automatically been granted Limited Access permission on document2)

5. We remove user1 and add user2 Design permission for document2.
(Group1 has full control permission on the Document Library.
Group1 has full control permission on document1.
User1 has Design permission on docuemnt1.
User1 has Limited Access permission to the Document Library.
User2 has Design permission on document2.
In the meanwhile, user2 is granted Limited Access permission to the
Document Library)

From now, Group1, user1 and user2 are all have permissions in the Document
Library. If we upload document 3, we can easily deduce what happens to
document3.

If you have any question on the issue, please feel free to let me know.

Sincerely,
Robert Zhao
Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages