Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Server > Server Security > Granting Read Permission to Application Instead of User

Reply
Thread Tools Display Modes

Granting Read Permission to Application Instead of User

 
 
Tom Bombadil
Guest
Posts: n/a

 
      05-01-2009
Hi,

At the place where I work, my boss wants me to make an Excel file available
to users so that it can be opened through this really small application that
basically just displays the contents of the file and allows you to search
through it. The catch is, he is very adamant that he does not want the users
to be able to copy the file.

Now, since I know that as soon as a user can read a file, he can also copy
it, I was wondering if it is at all possible to grant the read permission to
the application, and bypass the user altogether. The application has no Save
menu available.

Thanks for your thoughts

 
Reply With Quote
 
 
 
 
FromTheRafters
Guest
Posts: n/a

 
      05-02-2009
"Tom Bombadil" <> wrote in message
news:0D6D860C-3461-4562-8EA5-...
> Hi,
>
> At the place where I work, my boss wants me to make an Excel file
> available to users so that it can be opened through this really small
> application that basically just displays the contents of the file and
> allows you to search through it. The catch is, he is very adamant that
> he does not want the users to be able to copy the file.
>
> Now, since I know that as soon as a user can read a file, he can also
> copy it, I was wondering if it is at all possible to grant the read
> permission to the application, and bypass the user altogether. The
> application has no Save menu available.


Would ctrl+a, ctrl+c, and ctrl+v still work?


 
Reply With Quote
 
FromTheRafters
Guest
Posts: n/a

 
      05-04-2009
"FromTheRafters" <erratic @nomail.afraid.org> wrote in message
news:...
> "Tom Bombadil" <> wrote in message
> news:0D6D860C-3461-4562-8EA5-...
>> Hi,
>>
>> At the place where I work, my boss wants me to make an Excel file
>> available to users so that it can be opened through this really small
>> application that basically just displays the contents of the file and
>> allows you to search through it. The catch is, he is very adamant
>> that he does not want the users to be able to copy the file.
>>
>> Now, since I know that as soon as a user can read a file, he can also
>> copy it, I was wondering if it is at all possible to grant the read
>> permission to the application, and bypass the user altogether. The
>> application has no Save menu available.

>
> Would ctrl+a, ctrl+c, and ctrl+v still work?


There might be a way to leverage the fact that ADSs aren't copied across
a network. A program running on a server with NTFS could conceivably
take excel file contents from an ADS (empty.xls:xlsdata) and send it to
the client machine while the client user (with maximum privileges with
regard to the server's files) couldn't easily retrieve that data because
any attempts would return only the empty.xls file and not the actual
data file. I'm not sure if your "really small application" could be
modified to use RPC to access the actual data or not - it might be a way
to approach the desired results. Your clients would have to have some
tricks up their sleeves to work around such measures.


 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Granting Read Permission to Application Instead of Users Tom Bombadil Windows Server 5 05-03-2009 11:14 PM
Granting Read Permission to Desktop Application Tom Bombadil Windows Small Business Server 4 05-01-2009 09:38 PM
Granting "Allow" permission to a user in two user groups snowrider Active Directory 1 12-03-2008 12:27 PM
Fixed: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {555F3418-D99E-4E51-800A-6E89CFD8B1D7} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19). Skybuck Flying Windows 64 Bit 0 05-27-2007 04:45 AM
Server2003 capriciously granting write permission. Brian Smither Windows Server 0 11-08-2004 02:19 AM



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59