F10kr09 in C#.NET

Encode ECC200 in C#.NET F10kr09

Figure 10-9.

4. In Permissions, select Allow or Deny for each permission. 5. To prevent subfolders and files from inheriting these permissions, select Apply These Permissions To Objects And/Or Containers Within This Container Only. 6. Click OK to close the dialog box. In the Permission Entry dialog box for folders, you can choose how and where the special permissions are applied. Table 10-4 and Table 10-5 demonstrate the application of the special permissions depending on whether Apply These Permissions To Objects And/Or Containers Within This Container Only is selected.

10

| 193

Table 10-4. Application of special permissions when Apply These Permissions To Objects And/Or Containers Within This Container Only is selected Applies to Current Folder Yes Yes Applies to Subfolders in Current Folder No Yes Applies to Files in Current Folder No Yes Applies to Subsequent Subfolders No No Applies to Files in Subsequent Subfolders No No

Selected in Apply Onto This folder only This folder, subfolders and files This folder and subfolders This folder and files Subfolders and files only Subfolders only Files only

Table 10-5. Application of special permissions when Apply These Permissions To Objects And/Or Containers Within This Container Only is not selected Applies to Current Folder Yes Yes Applies to Subfolders in Current Folder No Yes Applies to Files in Current Folder No Yes Applies to Subsequent Subfolders No Yes Applies to Files in Subsequent Subfolders No Yes

Selected in Apply Onto This folder only This folder, subfolders, and files This folder and subfolders This folder and files Subfolders and files only Subfolders only Files only

As you ve seen, Administrators and members of a few other select groups are the only ones who can grant and change permissions. The exception is when a user is the owner of the folder or file in question. Every object on an NTFS partition has an owner, and the owner is the person who created the file or folder. The owner controls access to the file or folder and can keep out anyone he or she chooses.

194 |

For example, Wally (a user) creates a folder on his computer called My Private Stuff. After creating the folder, he right-clicks the folder, chooses Properties, and then clicks the Security tab (Figure 10-10).

Figure 10-10.

Wally sees that the Administrators group has full access to his folder, but because he is the owner of the folder, he can change the permissions so that he has the folder all to himself. He clicks Advanced to open the Advanced Security Settings dialog box and clears the Inherit From Parent check box (Figure 10-11).

Figure 10-11.

10

| 195

When the Security dialog box appears, Wally clicks Remove to remove the permission entries that were previously applied from the parent. After clicking Remove and accepting the security warning, Wally clicks OK and a Security warning appears indicating that everyone has been denied access to the folder. Wally clicks Yes to continue and returns to the Properties dialog box. He clicks the Add button and adds his user account with Full Control. After this is done, even the administrator receives an Access Denied message when trying to open the folder. Of course, nothing on the network can be completely beyond the reach of administrators, so an administrator can change the ownership by following these steps: 1. Right-click the My Private Stuff folder and choose Properties from the shortcut menu to open the Properties dialog box. Select the Security tab. A Security warning appears indicating that you don t have permissions to the folder but can take ownership. As shown in Figure 10-12, no changes can be made on the Security tab and only the Advanced button is enabled.