Scribd
Upload
67 views2 pages

Permissions Basic Full Control Basic Modify Basic Read & Execute Basic List Folder Contents Basic Read Basic Write

The document defines 14 common file and folder permissions: Traverse Folder/Execute File, List Folder/Read Data, Read Attributes, Read Extended Attributes, Create Files/Write Data, Create Folders/Append Data, Write Attributes, Write Extended Attributes, Delete Subfolders and Files, Delete, Read Permissions, Change Permissions, and Take Ownership. Each permission is described in 1-2 sentences. Permissions are evaluated based on a hierarchy of explicit denies overriding explicit allows which override inherited denies and allows.

Uploaded by

Sanja Jovanović
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
67 views2 pages

Permissions Basic Full Control Basic Modify Basic Read & Execute Basic List Folder Contents Basic Read Basic Write

The document defines 14 common file and folder permissions: Traverse Folder/Execute File, List Folder/Read Data, Read Attributes, Read Extended Attributes, Create Files/Write Data, Create Folders/Append Data, Write Attributes, Write Extended Attributes, Delete Subfolders and Files, Delete, Read Permissions, Change Permissions, and Take Ownership. Each permission is described in 1-2 sentences. Permissions are evaluated based on a hierarchy of explicit denies overriding explicit allows which override inherited denies and allows.

Uploaded by

Sanja Jovanović
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 2

Permissions

Basic Full

Basic

Basic Read &

Basic List

Basic

Basic

Control

Modify

Execute

Folder Contents

Read

Write

Travers Folder/Execute File


List Folder/ Read Data
Read Attributes
Read Extended Attributes
Create Files/Write Data
Create Folders/Append Data
Write Attributes
Write Extended Attributes
Delete Subfolders and Files
Delete
Read Permissions
Change Permissions
Take Ownership

Traverse Folder/Execute File


o

Traverse Folder: Allows or denies moving through a restricted folder to reach files and folders
beneath the restricted folder in the folder hierarchy. Traverse folder takes effect only when the
group or user is not granted the "Bypass traverse checking user" right in the Group Policy snap-in.
This permission does not automatically allow running program files.

Execute File: Allows or denies running program (executable) files.

List Folder/Read Data


o

List Folder: Allows or denies viewing file names and subfolder names within the folder. List
Folder only affects the contents of that folder and does not affect whether the folder you are
setting the permission on will be listed.

Read Data: Allows or denies viewing data in files.

Read Attributes
o

Allows or denies viewing the attributes of a file or folder, for example, "read-only" and "hidden".

Read Extended Attributes


o

Allows or denies viewing the extended attributes of a file or folder. Extended attributes are
defined by programs and may vary by program.

Create Files/Write Data


o

Create Files: Allows or denies creating files within the folder.

Write Data: Allows or denies making changes to a file and overwriting existing content.

Create Folders/Append Data


o

Create Folders: Allows or denies creating subfolders within the folder.

Append Data: Allows or denies making changes to the end of the file but not changing, deleting,
or overwriting existing data.

Write Attributes
o

Allows or denies changing the attributes of a file or folder, for example, "read-only" or "hidden".

The Write Attributes permission does not imply creating or deleting files or folders, it only
includes the permission to make changes to the attributes of an existing file or folder.

Write Extended Attributes


o

Allows or denies changing the extended attributes of a file or folder. Extended attributes are
defined by programs and may vary by program.

The Write Extended Attributes permission does not imply creating or deleting files or folders, it
only includes the permission to make changes to the extended attributes of an existing file or
folder.

Delete Subfolders and Files


o

Allows or denies deleting subfolders and files, even if the Delete permission has not been
granted on the subfolder or file.

Delete
o

Allows or denies deleting the file or folder. If you don't have Delete permission on a file or
folder, you can still delete it if you have been granted Delete Subfolders and Files on the parent
folder.

Read Permissions
o

Allows or denies reading permissions of a file or folder.

Change Permissions
o

Allows or denies changing permissions of the file or folder.

Take Ownership
o

Allows or denies taking ownership of the file or folder. The owner of a file or folder can always
change permissions on it, regardless of any existing permissions that protect the file or folder.

HIERARCHY FOR PERMISSIONS:


1. Explicit Deny
2. Explicit Allow
3. Inherited Deny
4. Inherited Allow

You might also like