Permissions

hungrybeaver

Expert Member
Joined
Mar 17, 2010
Messages
2,094
Reaction score
3
Location
Durban
I've been messing with this for too long today and I need some help. My Google expertise is failing me on this specific task.

Basically, my company is having a comp for the best photos. Everyone who would like to submit photos can put them into a folder on the server, from which the judges can view all of them and pick the finalists. I've been given the task of creating a folder where employees can put their submissions in.

Now, creating & sharing the folder for users to put their submissions in is no problem. That's the easy bit. The problem (challenge) I am facing is that the users must not be able to delete anything in the folder other than their own submissions. They must also have the ability to create themselves a folder and rename it. Editing, deleting, moving etc of anyone else's files is not permitted.

I've setup a small test scenario with 3 test users. I've gotten to the point where users can create folders/files, but not rename them (problem). They can create & place files in the folder, but not delete them (not a major problem). How can i allow the user to rename the files/folders they create?

Let me add that I've been playing with the permissions for the 3 users by adding the users into the Security tab for the folder. Ideally I'd rather not have to set permissions for each user (80+ users), but rather simply allow users to edit their submitted files and not anyone else's. I was hoping the CREATOR_OWNER would solve this dilemma but unfortunately not, or maybe I'm using it wrong.

Any suggestions on what the best way forward is with this? This can't be such a difficult thing to do!

The server is a Server 2003 file server on a domain.

(i'm in the middle of about 5 things so if the above isn't clear i can explain better below if need be when i get a gap)
 
Last edited:
What I want to do wont work. Apparently you cannot rename files/folders while denying 'Delete'. Something to do with the fact that when a new folder is created and you try to rename it, Windows has to delete the 'New Folder' name which of course it cannot do because of the permissions :rolleyes:. The mkdir command works though if you really need custom folder names.

According to the research, the demand actually cannot be done with NTFS File system. If a user want to rename a folder, he/she should have the "Delete" NTFS permission on the folder or file. Removing delete permission from the user or group brings a limitation that the user will not be able to rename the folder. This is because of the reason that the "rename" operation is also included within the "Delete" permission, which is by design.
Link and here and here.

So what I've ended up doing is leaving the Deny Delete permission on and if users want their uploaded file removed they need to contact me.
 
Just have them email it.

I considered it but not too keen on it. All photos will be large & in high quality (for printing requirements) and you can submit up to 5, so some emails will be much larger than 20mb. What I've setup is that everyone uploads to their local server, then I will copy it across to our main server towards the end of the competition.
 
Top
Sign up to the MyBroadband newsletter
X