Hello,

Im running into a problem with setting up permissions as I want for a project.

basically I have built a fairly large folder structure

Like

Data
-sensors
--green
--red
--blue
-audio
--10k
--5k
--2k
---2.1
---2.2

anyway
overall there are about 150 folders with different levels of depth

Now I want users to be able to add files and delete files within that structure, but not create or delete folders.

I dont really want to go though each folder and set permissions manually (by setting the delete sub folders and files)

any advice.

Right now i have
Transfers/Execute
List/read
Read attrib
/create files/ write data
read pemissions

11/12/2010 10:05:49 AM

inheritance

11/12/2010 10:15:43 AM

are we talking about a single drive or some sort of array?

If you're using an array the control software should be able to handle this without breaking a sweat using (as suggested) inheritance controls for your users/groups.

On a single drive (like you shared a folder structure from your machine) in windows you can tell it to adjust all subfolders and files when you're changing higher level stuff around.

If you're not on windows why in the world didn't you set this when you were making the structure? It's like 10 extra characters.

11/12/2010 10:56:16 AM

inheritance

11/12/2010 1:57:46 PM

Its ona single drive.

How would you set the permissions based on Inheritance?

In short, I cant seem to find a way to set them without individually setting folder permissions each of the deepest level folders.

11/12/2010 4:53:46 PM

Uncheck the include inheritable permissions box.
Check the Replace all child object permissions box.

Edit or Add a permissions entry that sets the permissions you want.

Done.

If you can't get to this screen, it's because you're running Windows 7 Home edition and you need to upgrade to Professional.

[Edited on November 12, 2010 at 7:24 PM. Reason : img]

11/12/2010 7:24:32 PM

sure there's not a command-line program to do this?

see I'm a goddam cheapskate

11/13/2010 1:45:07 AM

do it with powershell

11/13/2010 11:30:49 AM

yea,

I don't think there is any way to set the permissions exactly the way i want without Powershell or VBscript(i have yet to touch powershell).

Right now its off to re-write our backup system since server 2008 can't do scheduled tasks (at least not when you disable store domain credentials) worth a fuck.

11/16/2010 9:07:30 PM

xcacls can do it from the command line. But if I recall it won't propagate down to the child folders. There's an open source command line util (name escapes me right now) you can run after xcacls that will fix the inheritance down the tree.

11/18/2010 2:01:09 AM

Looks like the only way to do this is with recursion and checking if they are the deepest folder then changing permissions on that deep folder.

11/19/2010 7:20:19 AM