user could shift folder despite having only read rights

[Guest inenewbl]

Hi all. I have a user who could shift a folder from our fileserver to another

location even though she has only read access rights(NTFS permission) to that

folder. I have checked the user's effective permission and found that she has

only read rights and traverse folder rights(assigned in special permission).

I understand traverse folder rights only allow a user to go into folders

which they do not have permissions without listing the contents. Hence why is

my user able to shift a folder which she does not have anything more than

read rights to it? Thks in advance.

[Guest Lanwench [MVP - Exchange]]

Re: user could shift folder despite having only read rights

 

inenewbl <inenewbl@discussions.microsoft.com> wrote:

> Hi all. I have a user who could shift a folder from our fileserver to

> another location even though she has only read access rights(NTFS

> permission) to that folder. I have checked the user's effective

> permission and found that she has only read rights and traverse

> folder rights(assigned in special permission). I understand traverse

> folder rights only allow a user to go into folders which they do not

> have permissions without listing the contents. Hence why is my user

> able to shift a folder which she does not have anything more than

> read rights to it? Thks in advance.

 

What does "shift a folder" mean? Move?

 

If someone can move a folder, they clearly have more than read & traverse.

[Guest abckid]

Re: user could shift folder despite having only read rights

 

Hi,

 

I have too faced similar problems, since some users having Modify rights to

folders. But just that this happens mostly with a particular folder. Can we

enable auditing just to check about such events like moving folders to other

place ?

 

abc.

 

"Lanwench [MVP - Exchange]" wrote:

> inenewbl <inenewbl@discussions.microsoft.com> wrote:

> > Hi all. I have a user who could shift a folder from our fileserver to

> > another location even though she has only read access rights(NTFS

> > permission) to that folder. I have checked the user's effective

> > permission and found that she has only read rights and traverse

> > folder rights(assigned in special permission). I understand traverse

> > folder rights only allow a user to go into folders which they do not

> > have permissions without listing the contents. Hence why is my user

> > able to shift a folder which she does not have anything more than

> > read rights to it? Thks in advance.

>

> What does "shift a folder" mean? Move?

>

> If someone can move a folder, they clearly have more than read & traverse.

>

>

>