Here's a fun one for a Tuesday. I'm trying to create a Hand In folder for our students. Basic folder permissions would like like this:
Hand In - Read and Traverse - Deny Write
Subfolders (Per Teacher, grade, whatever each elementary school wants to create) - Students can write only. They will not be allowed to delete, create folders, or modify their file once they 'turn it in'. They will not be allowed to even see their own file as I have removed CREATOR OWNER.
My problem is trying to deny creating the folders. When I have the Create Folders / Append Data permission allowed, students are allowed to drop their files in, but obviously can also make folders. When I take the allow Create Folders / Append Data permission away, I can drop a file in the folder, but then immediately, that forces the mac to re-read the permissions, so any files I try to copy, move, save there then become denied. The operation can't be completed because you don't have permission to modify some items.
This clearly tells me the server isn't denying the write, but the Mac's interpretation of the permissions is denying the write.
Any ideas how I can accomplish this better? I have the permissions opened up way too much, just testing now, but this still doesn't let a kido save from a 10.7.4 Mac.