Re: only list folder contents but not read any data?

From: SaltPeter (SaltPeter_at_Jupiter.sys)
Date: 02/23/04 

Date: Mon, 23 Feb 2004 01:01:56 -0500

<anonymous@discussions.microsoft.com> wrote in message
news:13f1001c3f924$2199c3d0$a301280a@phx.gbl...
> yes i broke the inheritance & also copied the permissions.
>
> My current scenario is :
> AA - properties - security - 'only the LIST FOLDER
> CONTENTS is checked' - advanced - permission entries -
>
> 1. type - deny - DELETE SUDFOLDERS & FILES, DELETE, CHANGE
> PERMISSIONS, TAKE OWNERSHIP.
>
> 2. type - allow - TRAVERSE FOLDER / EXECUTE FILE, LIST
> FOLDER / READ DATA, READ ATTRIBUTES, READ EXTENDED
> ATTRIBUTES, READ PERMISSIONS.
>
> BB - properties - security - FULL CONTROL is checked.
>
> im not geting the desired result with this. please advice
> on what changes i need to make.

First, what desired result do you not get? Second reread my last post.
As i mentioned in last message, pay attention to the "apply onto" list box.
http://www.windowsitlibrary.com/Content/592/files/Fig7.gif

File permissions always overide folder permissions.
http://www.windowsitlibrary.com/Content/592/files/Table5.gif

Apply seperate permissions to the AA folder and its contents, though it will
create extra CPU activity. Then overide BB.

If AA denies and BB inherits, the full control on BB is overidden.

>
> >-----Original Message-----
> >
> >"sphilip" <anonymous@discussions.microsoft.com> wrote in
> message
> >news:149c301c3f8fe$37e545e0$a501280a@phx.gbl...
> >> i have this folder 'aa' which contains many excel, pdf,
> >> doc files & a sub-folder named 'bb'. i want a particular
> >> group named 'qata' to be able to only list contents
> >> of 'aa' not read any data but at the same time have full
> >> access to 'bb'.
> >>
> >> is this possible. how do i go about doing this.
> >>
> >> many thanks.
> >
> >If you aren't using ntfs, convert to it.
> >
> >First, assert that the "aa" folder's permissions are
> inherited from its
> >parent folder. You need to break that inheritence. In
> aa's permissions, use
> >the advanced permissions button to uncheck the "inherit
> from parent"
> >checkbox. When prompted, copy permissions over. You'll
> have to decide
> >whether you want permissions to trickle down to files or
> folders and files.
> >Then its just a question of refining the advanced NTFS
> permissions. Repeat
> >for folder bb.
> >
> >Pay carefull atention to the list box in the advanced
> ntfs permissions. You
> >can specify NTFS permissions for different objects,
> existing or not in your
> >directory. Never, ever use the deny option, always leave
> admin with full
> >control, leave system as is, only add the user groups you
> wish to control.
> >
> >You can also use Xcacls.exe
> >http://support.microsoft.com/default.aspx?kbid=318754
> >
> >
> >
> >.
> >