Windows Vista
Examples of Customized Permission Types: Group Work
When you set permissions, you are specifying what level of access users have to a folder and what actions they can perform (e.g., save, delete, create new folders or files, view files). There are several different types of permission levels. Permissions are generally divided by the circumstances or scenarios in which they are best put to use.
This document provides two examples of customized permission settings that can serve as group work folders. The first (Limited Access) example allows users to edit their own files and view other files in the folder. The second (All Access) allows users to edit and view anything in the folder.
NOTE: The settings listed for this type of permission are merely a guide; you may modify these settings as you see fit. Be aware that different types of permissions will allow for different levels of security.
This type of permission can be set using the Permission Entry dialog box. For information on how to access this dialog box, refer to Advanced Folder Permissions.
Important Notes
There are a few considerations to take into account whenever you work with customized permission settings:
-
Be careful of checking any of the Deny checkboxes. When you deny a permission, the denied permission takes precedence over any other related Allow permissions.
-
By default, any permissions applied to a folder will also apply to any object within the folder (such as files or subfolders). However, you can set unique permissions for each object within the folder.
-
When you copy a file or folder with permissions to another folder, the copy will take on the permissions of the new destination.
-
If a box is checked but grayed out, this means that the permission is applied and has been inherited from the "parent" folder (the containing folder). You cannot uncheck one of these checkboxes unless you unchecked Allow inheritable permissions from parent to propagate to this object in the Access Control Settings dialog box (for more information, see Advanced Folder Permissions ). You may still check other permissions.
Group Work: Limited Access
This permission setting has a fairly low security level but is useful in some instances. Please be aware that users can read anyone's files (however, users cannot edit anyone's files).
| Security Level | Suggested Use |
|---|---|
| Medium-Low | Applied to a folder to be used by a group working on related documents of a project - individuals can edit only their own. |
- Users can add files
- Users can see a list of files
- Users can edit their own file(s)
- Users can read anyone's files or documents
- Users cannot edit anyone's file
- Users cannot delete files
To set a file or folder with permissions of this type:
-
On the Taskbar, right click START
» select Explore
Windows Explorer opens. -
Navigate to and select the folder or file you wish to adjust/view permissions for
-
Right click the folder or file » select Properties
The Properties dialog box appears. -
Select the Security tab
-
Select group or user for whom you would like to alter the permission level
-
In the Permissions for [User] section, under the Allow heading, select Write and Read
-
Click APPLY
-
Click ADVANCED...
The Advanced Security Settings for [Foldername] dialog box appears. -
Select group or user for whom you would like to change the permissions
-
Click EDIT...
Another Advanced Security Settings for [Foldername] dialog box appears.
- OPTIONAL: To set permissions different from the parent folder (the containing folder),
- Deselect Include inheritable permissions from this object's parent
-
In the Security dialog box that appears, click REMOVE
The "parent" permissions are removed.
-
Select the appropriate user
-
Click EDIT...
The Permission Entry for [Foldername] dialog box appears.
-
In the Permissions section, under the Allow heading, select the following:
- Traverse folder / Execute file
- List folder / Read data
- Read attributes
- Read extended attributes
- Create files / Write data
- Create folders / Append data
- Write attributes
- Write extended attributes
- Read permissions
NOTES:
An option is selected if a checkmark appears in the box.
All other checkboxes under both the Allow and Deny headings should be left unchecked.
-
In each of the open dialog boxes, click OK
The permission setting is changed to the customized settings.
Group Work: All Access
This permission setting is primarily for those not concerned about security. As the name implies, users can mostly do what they want, with the exception of deleting subfolders and files, changing permissions, and taking ownership of files that are not theirs.
| Security Level | Suggested Use |
|---|---|
| Very Low | Applied to a folder to be used by a group working on related documents of a project. All files are available for editing by anyone in the group. |
- Users can see a list of files
- Users can access/read any file
- Users can edit every document
- Users can add files
- Users can delete files
To set a file or folder with permissions of this type:
-
On the Taskbar, right click START
» select Explore
Windows Explorer opens. -
Navigate to and select the folder or file you wish to adjust/view permissions for
-
Right click the folder or file » select Properties
The Properties dialog box appears. -
Select the Security tab
-
Select group or user for whom you would like to alter the permission level
-
In the Permissions for [User] section, under the Allow heading, select Modify
-
Click APPLY
-
Click ADVANCED
The Advanced Security Settings for [Foldername] dialog box appears. -
Select group or user for whom you would like to change the permissions
-
Click EDIT...
Another Advanced Security Settings for [Foldername] dialog box appears.
- OPTIONAL: To set permissions different from the parent folder (the containing folder),
- Deselect Include inheritable permissions from this object's parent
-
In the Security dialog box that appears, click REMOVE
The "parent" permissions are removed.
-
Select the appropriate user
-
Click EDIT...
The Permission Entry for [Foldername] dialog box appears.
-
In the Permissions section, under the Allow heading, check the following:
- Traverse folder / Execute file
- List folder / Read data
- Read attributes
- Read extended attributes
- Create files / Write data
- Create folders / Append data
- Write attributes
- Write extended attributes
- Read permissions
- Delete
NOTES:
An option is selected if a checkmark appears in the box.
All other checkboxes under both the Allow and Deny headings should be left unchecked.
-
In each of the open dialog boxes, click OK
The permission setting is changed to the customized settings.
