|
Posted by Roger Abell [MVP] on February 6, 2008, 7:10 am
If you were Registered and logged in, you could reply and use other advanced thread options >> You might be wondering, if Users only has a grant to create files
>> at the folder level, then how do they actually write the file. That
>> is where the grant to Creator Owner comes in.
>
> Yes, it all came together for me once I understood to apply "create files"
> to the folder only.
>
> --
> Will
>
OK, good luck, and please spam the vendor of that app with
a bit of your thoughts about their disregard for the guidance
MS has available for software house about how to write apps
that can be certified as made for Windows :) By this time
most of the larger app vendors have come around, but the
message still is needed by some.
Roger
>
>>>>> What you suggest makes sense in general, but I don't find an attribute
>>>>> for just creating new files. The closest attribute is "Create Files
>>>>> / Write Data". And that sounds suspiciously like a permission to
>>>>> both create new files but also to modify existing ones. If it is
>>>>> not, then which attribute would give the ability to modify existing
>>>>> files? It's really a shame that Microsoft didn't make each part of
>>>>> that a separate attribute.
>>>>>
>>>>
>>>> When you look in the advanced view the descriptions for the
>>>> individual ACEs have two parts separated by / char. On the
>>>> left is what the ACE means applied to a directory, on the right
>>>> what it means applied to a file. So, selection of that ACE and
>>>> in the dropbox set to This folder only allows only creating new
>>>> files in that directory (similarly applied to This folder and subs).
>>>
>>> Aha.... I think I just evolved. Thank you. :)
>>>
>>>
>>>> I think this could be seen as artifact of the era when designed
>>>> and all bits added up to significant cost, so something like a
>>>> double word is all that was allocated for all ACE flags, and
>>>> a couple of them for indication of applicability to objects and/or
>>>> container objects.
>>>
>>> Regardless of how badly they overloaded the implementation, the user
>>> interface of the Advanced Security Settings dialog for ACLs is fairly
>>> awful. It's way too compressed to easily pull out the explanation you
>>> gave just from usage. And in general the fact that the implementation
>>> is overloaded is not a great reason to overload the user interface in a
>>> parallel fashion.
>>>
>>> --
>>> Will
>
>
| 
XML site map