We help IT Professionals succeed at work.

Privilege precedence

CodeParadise
CodeParadise asked
on
Medium Priority
289 Views
Last Modified: 2010-04-18
I have a top level directory in which I assign a certain group to have only read privileges. In a sub-directory inside that directory I have a folder where I assign a user to have full privileges to write files to it. That user is a member of the group that has only read privileges. Is there a conflict created in the sub-directory where I assigned the user to have full rights? Which get the precedence? The group privileges  or the user privileges ?
Comment
Watch Question

Billing Engineer
CERTIFIED EXPERT
Most Valuable Expert 2014
Top Expert 2009
Commented:
privileges are given to a folder, and can be given to all the children explicitely or implicitely.
you have to check if the permissions on the child folder are "inherited" or not, ie if they take the inherited permissions or not.

now, granted privileges will accumulate, so if the users has no permissions itself, but the group he is part of has full control, the user has full control.
if the group has no permissions, but the user was granted full control, he will keep full control

only if at some point there is a deny, that overrides any granted permissions

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Donnie4572IT Manager
Commented:
Permissions are accumaltive.

Example:
If I am a member af group1, group2, and group3
Group1 = read
Group2 = modify
Group3 = Full Control

My effective permission is Full Control. No conflict with this design.

Lets suppose that I am a member of Group4 which has been assigned the deny permission.
My effective permission is denied because deny always overides all allow permissions for that resource.

Author

Commented:
Thanks angelIII  and Donnie4572!
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.