Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Modify but not delete permissons

Posted on 2007-10-09
Medium Priority
Last Modified: 2013-12-04

I am having a specific issue with regards to granting permissions on an NTFS shared drive on our server. We are currently moving towards EDM, and so needed to create a file storage structure for users to store all documents on specific clients in particular folders. We need users of these directories to be able to add documents, edit documents, add folders, and change the names of both files and folders. The only permission we don't want to grant is the ability to delete folders or files.

Now i thought this would be fairly trivial, as we already had all the permissions groups created, and i thought all we would need to do is edit the advanced NTFS permissions for this group and deny the "delete" and "delete subfolders & files" permissions. I have done this, and true enough deletion is denied, but when i create a new folder for example, i can not name this folder.

I do understand that there may be issues with users who try to execute MS documents straight from the archive, as the application won't be able to delete the temporary files created. If this is the case then i may have to draft policy on managing and editing these documents, but not being able to name or rename files or folders is particularly frustrating as i need the users to take some responsibility for creating some of the lower level file structures as an ongoing improvement process.

This is really strange to me as the write permissions, in fact all other permissions, are allowed - so i can't see why this doesn't work.

Any help again muchly appreciated, thanks for all your time in advance.

Question by:liam79
  • 2

Accepted Solution

jimstar earned 1000 total points
ID: 20039933
In NTFS-land, removing the Delete permission prevents a user from renaming the file/directory. If you grant Modify permission, this includes delete which then allows renaming.

To sum it up, you cannot deny Delete if you want them to be able to rename. That's NTFS for you.

Expert Comment

ID: 20039941
(As an aside, this is probably rooted in the fact that renaming is seen as 'deleting' the old file - if you don't want someone to delete a particular file, it would stand to reason that you don't want them renaming it either... if I have Document1.doc and want to prevent deletion, someone could rename it to config.sys and it may as well be deleted as far as the rest of the world is concerned.)

Author Comment

ID: 20064352
Terrible news. Thanks very much though, especially the follow comment explaining the logic :)

Featured Post

Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question