Windows Vista
Examples of Customized Permission Types: Course Materials
When you set permissions, you are specifying what level of access users have to a folder and what actions they can perform (e.g., save, delete, create new folders or files, view files). There are several different types of permission levels. Permissions are generally divided by the circumstances or scenarios in which they are best put to use.
This document provides an example of a customized permission setting that serves as a course materials folder. It can be helpful if you need users to be able to access documents for a class without allowing them to input or modify anything within the folder.
NOTE: The settings listed for this type of permission are merely a guide; you may modify these settings as you see fit. Be aware that different types of permissions will allow for different levels of security.
This type of permission can be set using the Permission Entry dialog box. For information on how to access this dialog box, refer to Advanced Folder Permissions.
Important Notes
There are a few considerations to take into account whenever you work with customized permission settings:
-
Be careful of checking any of the Deny checkboxes. When you deny a permission, the denied permission takes precedence over any other related Allow permissions.
-
By default, any permissions applied to a folder will also apply to any object within the folder (such as files or subfolders). However, you can set unique permissions for each object within the folder.
-
When you copy a file or folder with permissions to another folder, the copy will take on the permissions of the new destination.
-
If a box is checked but grayed out, this means that the permission is applied and has been inherited from the "parent" folder (the containing folder). You cannot uncheck one of these checkboxes unless you unchecked Allow inheritable permissions from parent to propagate to this object in the Access Control Settings dialog box (for more information, see Advanced Folder Permissions). You may still check other permissions.
The Course Materials Setting
This permission setting allows users to "see but not touch." That is, they can view and access the contents of the folder but cannot make changes to its content or save any kind of file to the folder.
| Security Level | Suggested Use |
|---|---|
High |
Applied to a folder to which an instructor posts class materials. |
- Users can see a list of files
- Users can read or access every document or file in the folder (but cannot add new files)
- Users cannot edit existing files
- Users cannot add new files
- Users cannot delete files or subfolders.
To set a file or folder with permissions of this type:
-
On the Taskbar, right click START
» select Explore
Windows Explorer opens. -
Navigate to and select the folder or file you wish to adjust/view permissions for
-
Right click the folder or file » select Properties
The Properties dialog box appears. -
Select the Security tab
-
Select group or user for whom you would like to alter the permission level
-
In the Permissions for [User] section, under the Allow heading, select Read
-
Click APPLY
-
Click ADVANCED...
The Advanced Security Settings for [Foldername] dialog box appears. -
Select group or user for whom you would like to change the permissions
-
Click EDIT...
Another Advanced Security Settings for [Foldername] dialog box appears.
- OPTIONAL: To set permissions different from the parent folder (the containing folder),
- Deselect Include inheritable permissions from this object's parent
-
In the Security dialog box that appears, click REMOVE
The "parent" permissions are removed.
-
Select the appropriate user
-
Click EDIT...
The Permission Entry for [Foldername] dialog box appears.
-
In the Permissions section, under the Allow heading, check the following:
- Traverse folder / Execute file
- List folder / Read data
- Read attributes
- Read extended attributes
- Read permissions
NOTES:
An option is selected if a checkmark appears in the box.
All other checkboxes under both the Allow and Deny headings should be left unchecked.
-
In each of the open dialog boxes, click OK
The permission setting is changed to the customized settings.
