|
Posted by Roger Abell [MVP] on December 16, 2005, 3:29 am
Please log in for more thread options
Root - FolderEditors List for This folder and subfolders
Folder1 - FolderEditors Special for This folder, subfolders and files
inheritance not blocked
Folder 1-1 no new grants, just the inherited
Form the Special by granting Read&Execute, List, Read, and Write, then
click advanced and locate and highlight the new Read, Write & Execute
ACE and click on Edit. In the advanced edit dialog add one single check
for Delete Subfolders and Files
Now, depending on what you mean by not able to drag Folder 1 into
Folder 2 you may be there. Since they can read the substructure and
files under Folder 1 and they have been given ability to modify under
Folder 2 they can drag copy. Also, since they also have modify under
Folder 1 they can also drag move, but they do not have ability to move
the uppermost folder (Folder 1).
That is about as good as it gets, as you have a fundemental confilict
between what you want them able to do (modify below 2nd level
folders) and what you do not want them to do (copy new stuff below
a second level folder).
> We want to create a folder structure similar to the following:
>
> -Root
> --Folder 1
> ---Folder 1-1
> ---Folder 1-2
> --Folder 2
> ---Folder 2-1
> ---Folder 2-2
>
> We will then have 2 security groups, Folder_Editors and Folder_Admins
>
> We want Folder_Editors to be able to see any of the folders, but not be
> able to add files or folders in the first level (under the root folder).
> In addition, we want them to be able to have modify permissions under the
> second level (under Folder 1 and under Folder 2).
>
> We can get that far, but we also want to make sure that a Folder_Editor
> cannot drag Folder 2 into Folder 1. All the options we have tried so far
> give modify rights to Folder 1 and Folder 2, not just there contents, so
> dragging is possible. What is the best way to handle this scenario?
>
>
| 
XML Sitemap