Guest inenewbl Posted October 30, 2007 Posted October 30, 2007 Hi all. I have a user who could shift a folder from our fileserver to another location even though she has only read access rights(NTFS permission) to that folder. I have checked the user's effective permission and found that she has only read rights and traverse folder rights(assigned in special permission). I understand traverse folder rights only allow a user to go into folders which they do not have permissions without listing the contents. Hence why is my user able to shift a folder which she does not have anything more than read rights to it? Thks in advance.
Guest Lanwench [MVP - Exchange] Posted October 30, 2007 Posted October 30, 2007 Re: user could shift folder despite having only read rights inenewbl <inenewbl@discussions.microsoft.com> wrote: > Hi all. I have a user who could shift a folder from our fileserver to > another location even though she has only read access rights(NTFS > permission) to that folder. I have checked the user's effective > permission and found that she has only read rights and traverse > folder rights(assigned in special permission). I understand traverse > folder rights only allow a user to go into folders which they do not > have permissions without listing the contents. Hence why is my user > able to shift a folder which she does not have anything more than > read rights to it? Thks in advance. What does "shift a folder" mean? Move? If someone can move a folder, they clearly have more than read & traverse.
Guest abckid Posted October 30, 2007 Posted October 30, 2007 Re: user could shift folder despite having only read rights Hi, I have too faced similar problems, since some users having Modify rights to folders. But just that this happens mostly with a particular folder. Can we enable auditing just to check about such events like moving folders to other place ? abc. "Lanwench [MVP - Exchange]" wrote: > inenewbl <inenewbl@discussions.microsoft.com> wrote: > > Hi all. I have a user who could shift a folder from our fileserver to > > another location even though she has only read access rights(NTFS > > permission) to that folder. I have checked the user's effective > > permission and found that she has only read rights and traverse > > folder rights(assigned in special permission). I understand traverse > > folder rights only allow a user to go into folders which they do not > > have permissions without listing the contents. Hence why is my user > > able to shift a folder which she does not have anything more than > > read rights to it? Thks in advance. > > What does "shift a folder" mean? Move? > > If someone can move a folder, they clearly have more than read & traverse. > > >
Recommended Posts