File Access Rule

  • Thread starter Thread starter Armin Zingler
  • Start date Start date
A

Armin Zingler

Hi, (WinXP Prof, NTFS)

I have a directory C:\A\B. When I look at the access rights of the folder in
the Explorer, I see that one ACE says that it is inherited from C:\A. But if
I look at the ACL of C:\A, there is no such entry. How comes?


Armin
 
Armin said:
I have a directory C:\A\B. When I look at the access rights of the
folder in
the Explorer, I see that one ACE says that it is inherited from C:\A.
But if
I look at the ACL of C:\A, there is no such entry. How comes?

If you move a folder from one place to another, depending on how you do it, it
may keep the inherited entries from its original location. When I tried this
just now the GUI says that the entry is inherited from "Parent Folder" rather
than saying a specific folder, so it doesn't match your symptoms precisely - but
it gives an example of how inherited permissions may wind up wrong.

This can also happen if permissions on a folder are changed by any means other
than via the GUI - in this case the permissions on the contents of the folder
don't get updated (in Windows XP and earlier versions).

Harry.
 
Harry Johnston said:
If you move a folder from one place to another, depending on how you
do it, it may keep the inherited entries from its original location.
When I tried this just now the GUI says that the entry is inherited
from "Parent Folder" rather than saying a specific folder, so it
doesn't match your symptoms precisely - but it gives an example of
how inherited permissions may wind up wrong.

This can also happen if permissions on a folder are changed by any
means other than via the GUI - in this case the permissions on the
contents of the folder don't get updated (in Windows XP and earlier
versions).

Harry.


Thanks for this helpful information! I don't want to go into details (would
find them on my own if necessary) but let me please ask one more question:
Does this mean that inherited ACEs are /stored/ in the sub folder's (c:\a\b)
ACL? I thought that only the parent folder (c:\a) contains the information
"ACE also applies to sub folders". ... no, wait, I found it very quickly -
if anybody is interested:
http://msdn2.microsoft.com/en-us/library/aa374920.aspx

Thanks again.


Armin
 
Back
Top