I may be losing it here, but not having any success giving a handful of users the ability to save a single Excel document in a large folder of other folders and files. As a test, this user has set Allow to Full control on the specific file, and traverse folder permissions on the folder it is contained in. If the user opens, modified, and saves the file they receive an Access Denied. Please contact administrator error. If I give them write access to the folder the file is contained in, they can save fine. I thought DACL works by evaluating file permissions first, hits the allow on the write, and is golden? This is why one could set deny write on folder A, allow write on folder B and nothing on file in folder B, and a user part of that group would still have write permissions even if there is full propagation (because in the end, a DACL...
↧