what is traverse? I don't get it.

  • Thread starter Thread starter Jacques Koorts
  • Start date Start date
J

Jacques Koorts

Is traverse listing the folder, like typing "dir" at command prompt?

If so then this contradicts:

The Bypass traverse checking user right allows the user to browse through
folders in the NTFS file system or in the registry without checking for the
Traverse Folder special access permission. The Bypass traverse checking user
right does not allow the user to list the contents of a folder; it allows
the user to traverse its folders only.

what is traverse exactly?? the dictionary says "to go through", what is "to
go through" in windows?
 
Traversing, with regards to permissions, is when you have access to sub
folders even though you don't have access to all folders in the path.

For example, you have access to files in \Data\live\it\server\training\2004
but don't have appropriate permissions for \data\live

Traversing means that you can still access lower-down files and folders.

Hope that helps,

--

Paul Williams

http://www.msresource.net
http://forums.msresource.net


Is traverse listing the folder, like typing "dir" at command prompt?

If so then this contradicts:

The Bypass traverse checking user right allows the user to browse through
folders in the NTFS file system or in the registry without checking for the
Traverse Folder special access permission. The Bypass traverse checking user
right does not allow the user to list the contents of a folder; it allows
the user to traverse its folders only.

what is traverse exactly?? the dictionary says "to go through", what is "to
go through" in windows?
 
If an account does not have a grant of the Bypass Traverse Checking
user right, then if they attempt to access say
c:\somedir\subdir\finaldir\file.txt
and they have a grant for file.txt for the type of access they are trying
the access will fail unless they also have a grant allowing them to
list the directories that are in the path, and there permissions will be
checked at each directory traversed to get to the file.
If they have this user right granted, then the checks for grants on the
directories traversed is not performed and so they can access the
file.txt even if they have no premissions on one or more of the folders.
Now, if they want to browse to the folder containing the file, they
will still need grants to list the directory contents of any directory
they want to "explore". Bypass traverse checking however would
allow then to access the file directly using its fully qualified path.
 
Back
Top