Mark wrote:
>
> Is it possible to have a shared folder where users can
> create/modify files but not delete them. I'm trying to
> prevent accidental deletes. Everytime I set the modify
> permission for the folder and then go into advanced and
> remove delete and delete subfolders and files I lose the
> modify permission.
> Thanks in advance.
>
> Mark
modify=read+execute+write+delete
The delete perm has different meaning for folders than for files. For
folders, the delete perm is required to delete, move or rename the
folder. For files, it is only required to delete the file.
However, keep in mind that many applications, including MS Office apps,
actually deletes a data file when saving changes to it, so full modify
perms are usually required on files if you need users to be able to make
changes to them.
What you can do for folders is remove the delete perms for the folder
and subfolders only. However, what happens there is that when a user
tries to create a new folder, they can't rename it from New Folder
unless they have delete perms on it. So, what I do is grant delete
rights to subfolders for CREATOR/OWNER, so the person creating the
folder can give it a name, but no one else can move, delete or rename
it. That does leave the hole, though, that the person creating the
folder can move, delete or rename it. (note, that if you create folders
from the command line, the delete perm is not necessary)
For files, you can do some creative stuff w/ CREATOR/OWNER as well.
hth
--
Ricardo M. Urbano
Microsoft Windows 2000/NT MVP
|