Windows Vista
Examples of Customized Permission Types: Dropbox
When you set permissions, you are specifying what level of access users have to a folder and what actions they can perform (e.g., save, delete, create new folders or files, view files). There are several different types of permission levels. Permissions are generally divided by the circumstances or scenarios, in which they are best put to use.
This document provides two examples of permission settings that can serve as dropboxes. The first setting, Dropbox, allows users only to input files, but not read other files in the folder or change their own afterwards. The second, the Revisable Dropbox, allows users to input files and edit them within the folder, but still does not allow them to view other files or subfolders.
NOTE: The settings listed for this type of permission are merely a guide; you may modify these settings as you see fit. Be aware that different types of permissions will allow for different levels of security.
This type of permission can be set using the Permission Entry dialog box. For information on how to access this dialog box, refer to Advanced Folder Permissions.
Important Notes
There are a few considerations to take into account whenever you work with customized permission settings:
-
Be careful of checking any of the Deny checkboxes. When you deny a permission, the denied permission takes precedence over any other related Allow permissions.
-
By default, any permissions applied to a folder will also apply to any object within the folder (such as files or subfolders). However, you can set unique permissions for each object within the folder.
-
When you copy a file or folder with permissions to another folder, the copy will take on the permissions of the new destination.
-
If a box is checked but grayed out, this means that the permission is applied and has been inherited from the "parent" folder (the containing folder). You cannot uncheck one of these checkboxes unless you unchecked Allow inheritable permissions from parent to propagate to this object in the Access Control Settings dialog box (for more information, see Advanced Folder Permissions). You may still check other permissions.
The Dropbox Setting
Under this permission setting, a user will never see a file they save to the folder. However, the file is still accessible to the owner of the folder. Owners of folders have full permission within the folder.
| Security Level | Suggested Use |
|---|---|
| High | Applied to a folder to which students submit assignments that cannot be changed/edited. |
- Users can add files (but not overwrite an existing file)
- Users cannot see a list of files
- Users cannot edit their own documents
- Users cannot read or edit anyone else's document
- Users cannot delete any files or subfolders
To set a file or folder with permissions of this type:
-
On the Taskbar, right click START
» select Explore
Windows Explorer opens. -
Navigate to and select the folder or file you wish to adjust/view permissions for
-
Right click the folder or file » select Properties
The Properties dialog box appears. -
Select the Security tab
-
Select group or user for whom you would like to alter the permission level
-
In the Permissions for [User] section, under the Allow heading, select Write
-
Click APPLY
-
Click ADVANCED
The Advanced Security Settings for [Foldername] dialog box appears. -
Select group or user for whom you would like to change the permissions
-
Click EDIT...
Another Advanced Security Settings for [Foldername] dialog box appears.
- OPTIONAL: To set permissions different from the parent folder (the containing folder),
- Deselect Include inheritable permissions from this object's parent
-
In the Security dialog box that appears, click REMOVE
The "parent" permissions are removed.
-
Select the appropriate user
-
Click EDIT...
The Permission Entry for [Foldername] dialog box appears.
-
In the Permissions section, under the Allow heading, check the following:
- Traverse folder / Execute file
- Read attributes
- Create files / Write data
- Create folders / Append data
- Write attributes
- Write extended attributes
- Read permission
NOTES:
An option is selected if a checkmark appears in the box.
All other checkboxes under both the Allow and Deny headings should be left unchecked.
-
In each of the open dialog boxes, click OK
The permission setting is changed to the customized settings.
The Revisable Dropbox Setting
With this permission setting, any user can create a file in the folder and edit it, but a user cannot edit any file inside the folder that is not his or her own. The owner of the folder may see and edit all files within the folder.
| Security Level | Suggested Use |
|---|---|
| Medium-High | Applied to a folder to which students submit assignments that can be changed/edited/updated. |
- Users can add files
- Users can see a list of files
- Users can edit their own file(s)
- Users cannot read or edit documents that are not their own
- Users cannot delete files or subfolders
To set a file or folder with permissions of this type:
-
On the Taskbar, right click START
» select Explore
Windows Explorer opens. -
Navigate to and select the folder or file you wish to adjust/view permissions for
-
Right click the folder or file » select Properties
The Properties dialog box appears. -
Select the Security tab
-
Select group or user for whom you would like to alter the permission level
-
In the Permissions for [User] section, under the Allow heading, select List Folder Contents and Write
-
Click APPLY
-
Click ADVANCED
The Advanced Security Settings for [Foldername] dialog box appears. -
Select group or user for whom you would like to change the permissions
-
Click EDIT...
Another Advanced Security Settings for [Foldername] dialog box appears.
- OPTIONAL: To set permissions different from the parent folder (the containing folder),
- deselect Include inheritable permissions from this object's parent
-
In the Security dialog box that appears, click REMOVE
The "parent" permissions are removed.
-
Select the appropriate user
-
Click EDIT...
The Permission Entry for [Foldername] dialog box appears.
-
In the Permission Entry for [User]... dialog box, in the Permissions section, under the Allow heading, check the following:
- Traverse folder / Execute file
- List folder / Read data
- Read attributes
- Read extended attributes
- Create files / Write data
- Create folders / Append data
- Write attributes
- Write extended attributes
- Read permissions
NOTE: All other checkboxes under both the Allow and Deny headings should be left unchecked.
-
In each of the open dialog boxes, click OK
The permission setting is changed to the customized settings.
