Re: Permission Question

Hi Adam ,

Thanks for your reply.

I know your mean and I'm glad to provide information.

Have a good day!


Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------
From: "Adam Raff" <adam@xxxxxxxxxxxxxxxx>
References: <#NXpJ6mtGHA.4472@xxxxxxxxxxxxxxxxxxxx>
<0cbtztttGHA.5840@xxxxxxxxxxxxxxxxxxxxx>
<eF9huQ#tGHA.4336@xxxxxxxxxxxxxxxxxxxx>
<Wlm9yHfuGHA.3920@xxxxxxxxxxxxxxxxxxxxx>
Subject: Re: Permission Question
Date: Mon, 7 Aug 2006 12:04:51 -0400
Lines: 245
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
X-RFC2646: Format=Flowed; Original
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
Message-ID: <ukJ73sjuGHA.4460@xxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.win2000.general
NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189
Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.win2000.general:206354
X-Tomcat-NG: microsoft.public.win2000.general

Hi Vincent,

Thanks, I just wanted to make sure that I am not missing some trick that
somebody may share. Per my email we have created templates and we have
given the users in question rights to those folders so that we can copy
the
folder and they can keep the rights.

What the issue was and as I said I felt that I new the answer but I
wanted
to make sure, was that the people that be wanted the user to copy the
folder
into the 2006 directory of which they did not have the rights to copy the
folder. Once the folder is copied by a user with rights then the rights
will move over with the copy and the user can then work with the folder
in
the 2006 directory.

I just wanted to make sure that I was not missing something which is why
I
posted this email.

Thanks for your help and your confirmation on this.

Adam Raff



"Vincent Xu [MSFT]" <v-xuwen@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:Wlm9yHfuGHA.3920@xxxxxxxxxxxxxxxxxxxxxxxx
Hi Adam,

-- there a way for a person who has rights from one folder
--such as Template, can that person copy into a another folder where
they
have
--no rights to copy at all.

IMHO, this doesn't make sense. You must give him the rights to copy if
you
want him able to copy.



Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no
rights.
======================================================



--------------------
From: "Adam Raff" <adam@xxxxxxxxxxxxxxxx>
References: <#NXpJ6mtGHA.4472@xxxxxxxxxxxxxxxxxxxx>
<0cbtztttGHA.5840@xxxxxxxxxxxxxxxxxxxxx>
Subject: Re: Permission Question
Date: Fri, 4 Aug 2006 12:36:46 -0400
Lines: 140
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
X-RFC2646: Format=Flowed; Original
Message-ID: <eF9huQ#tGHA.4336@xxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.win2000.general
NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net
208.39.138.189
Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.win2000.general:206256
X-Tomcat-NG: microsoft.public.win2000.general

Thanks for your response on this topic,

What you told me helped a little as it made some sense out of
something's.
My big issue is, there a way for a person who has rights from one
folder
such as Template, can that person copy into a another folder where they
have
no rights to copy at all.

That is what my problem is, I would like to allow them to copy say a
folder
yet not give them the rights to look into other folders. We have a lot
of
folders that these managers will be creating and then moving into the
2006
folder. I have two users who have modify rights but it would be easier
if
the manager can move the folder there themselves with out the two users
doing it.

Thanks
Adam Raff


"Vincent Xu [MSFT]" <v-xuwen@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:0cbtztttGHA.5840@xxxxxxxxxxxxxxxxxxxxxxxx
Hi ,

Actually:

When a file is copied from one location to another location, whether
on
the
same or different volume, a new file is created in the destination
location. The file inherits the permissions, the Access Control List
(ACL),
from its parent folder.

When a file is moved from one location to another on the same volume,
the
file retains its security descriptor. Only the pointer to the
resource
is
modified.

When a file is moved from one location to another on a different
volume,
it
acts similar to the copy, except the file is deleted from the source
location. The moved file inherits the permission from the parent
folder.

Hope the information helps.

Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your
newsreader
so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no
rights.
======================================================



--------------------
From: "Adam Raff" <adam@xxxxxxxxxxxxxxxx>
Subject: Permission Question
Date: Wed, 2 Aug 2006 16:02:07 -0400
Lines: 52
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
X-RFC2646: Format=Flowed; Original
Message-ID: <#NXpJ6mtGHA.4472@xxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.win2000.general
NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net
208.39.138.189
Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.win2000.general:206152
X-Tomcat-NG: microsoft.public.win2000.general

Good Day,

I have a permission question that I feel I know the answer, but I
want
to
make sure that there is no other way around this that I may not be
aware
of

Prodcommg folder on Testserver
Bryan folder - Full rights to Bryan plus inherit
Carlos folder - Full rights to Carlos plus inherit
Sue folder - Full rights to Sue plus inherit
-------------
Common Production folder (CPF) - inherit rights Plus Mary
and
Eve
has full rights
template CG - inherit from CPF plus CG has full rights
Template CK - inherit rights from CPF plus CK has full
rights
Template SC - inherit rights from CPF plus SC has full
rights
2005 folder - inherit rights from CPF Mary and Eve
2006 folder - inherit rights from CPF Mary and Eve
Template SC - Copied from Common Production folder
Template CK

As you can see from my example above in Common Production folder we
have
two
(Mary and Eve) users that have full or modify rights from that
folder
and
below via inherit permissions.

When Mary copies the template of SC to the 2006 folder, the rights
also
copy
over so that SC can access the folder so he can add or delete
files.
CK
would not be able to access SC folder since he would not have the
proper
rights.

Since Mary has full rights she can copy the folder with no issue
into
the
2006 folder because of inherit rights. SC would not be able too,
since
SC
does not have full/modify rights to the 2006 folder.

Once Mary copies SC Template over to the 2006 folder, then SC can
enter
and
modify data within that folder because the permission are copied
with
the
folder.


My question with the above example is as follows

Is there a way that we can have SC copy her template over to the
2006
folder
with out giving her full rights. We do not want SC to view or look
into
any
other folder except her own template?

My gut feeling is No, but I may be wrong and there may be another
way
with
advanced permissions of which I do not use that much.

Thanks
Adam Raff













.