Technical Question for folder setups and permissions.

[KeithTalent]

Does anyone know the answer to this question from m'lady? essentially wanting to allow read/write at lower levels of a sub-folder, but restricting them above a certain level.

Is it possible to set folder permissions such that all users can add subfolders to the “1 Accounting”, “2 Tax” etc folders and not be able to add subfolders at higher levels of the folder structure? Each client has the same 1, 2, 3… sub-structure so we would want to apply these permissions for all clients (ie not just the one example I have provided). We are using Windows 2003 and we use Citrix both in the office and remotely.

Halp!

KT

 

[Fritzo]

Does anyone know the answer to this question from m'lady? essentially wanting to allow read/write at lower levels of a sub-folder, but restricting them above a certain level.



Halp!

KT

Yes. If you add the permissions to the folder, it will propagate to any created sub-folders, but not affect higher-up folders.

 

[KeithTalent]

Yes. If you add the permissions to the folder, it will propagate to any created sub-folders, but not affect higher-up folders.

Do you have to set them individually or can you group them since they have hundreds of clients set up the same way and would like to apply those permissions to all of the folder structures?

KT

 

[TwiceOver]

Yes. If you add the permissions to the folder, it will propagate to any created sub-folders, but not affect higher-up folders.

Also be sure to disable inheritable file permissions if the above folders are restricting what the subfolders need to do.

 

[Fritzo]

Do you have to set them individually or can you group them since they have hundreds of clients set up the same way and would like to apply those permissions to all of the folder structures?

KT

She should be able to make a group and then add people individually. Keep in mind that permissions on higher-up folders will override permissions on subfolders, so some tinkering will be in order to get things balanced out.

 

[darkewaffle]

Do you have to set them individually or can you group them since they have hundreds of clients set up the same way and would like to apply those permissions to all of the folder structures?

KT

I would imagine there should be some way to automate applying permissions to the subfolders via a batch process of some sort. Microsoft seems to have a workaround of sorts available.

But on a similar note you shouldn't give individual users permission, but rather create a user group that has permission. This way you can just adjust who is in the group and the changes will automatically propagate to all folders without having to go back and adjust them time and again.

 

[SandEagle]

what program is that? some allow to stop inheriting permissions from parent and allow you to set custom ACLs. hundreds of different permissions on different folders may need to be custom coded

 

[KeithTalent]

I think it's for going paperless. They have setup all of the clients with separate folders, then the client numbers below them. They don't want to those to be alterable by the common folk, but everything below that (for adding particular documents, new folders for specific work done for the client, billings, whatever) needs to be editable by the working staff.

I've sent along the responses so far. Thanks guys!

KT

 

[Gooberlx2]

I think something like this might work for a folder template...

Using the advanced permissions settings:

TOPfolder: disable permission inheritance
Admin owner/group: full control
Users:

SUBfolder: enable permission inheritance
Admin owner/group: full control
Users:

Make copies of the template as needed with something like:

robocopy /mir /copyall x:\TOPfolder x:\destination

I'm no pro on permissions/acls, but I tested that out on my workstation at home and it seemed to work.

 

[DaveSimmons]

A completely different approach would be to use Amazon S3 storage and Bucket Explorer:

http://www.bucketexplorer.com/

Team version info
http://www.bucketexplorer.com/documentation/amazon-s3--bucket-explorer-team-edition-20.html

(I've set up S3 buckets and used BE and CrossFTP, but have no experience with the Team Version and its accounts system.)

 

[KeithTalent]

I think something like this might work for a folder template...

Using the advanced permissions settings:

TOPfolder: disable permission inheritance
Admin owner/group: full control
Users:

SUBfolder: enable permission inheritance
Admin owner/group: full control
Users:

Make copies of the template as needed with something like:

robocopy /mir /copyall x:\TOPfolder x:\destination

I'm no pro on permissions/acls, but I tested that out on my workstation at home and it seemed to work.

Sent this along; thanks for the specifics, that is really helpful.

A completely different approach would be to use Amazon S3 storage and Bucket Explorer:

http://www.bucketexplorer.com/

Team version info
http://www.bucketexplorer.com/documentation/amazon-s3--bucket-explorer-team-edition-20.html

(I've set up S3 buckets and used BE and CrossFTP, but have no experience with the Team Version and its accounts system.)

Thanks for the tip, but I don't think it's viable for this situation as they want to use their existing framework to make it happen.

KT