General discussion


Need W2K Pro Permissions Help

By Carroll ·
I'm having trouble configuring the file permissions/advanced permissions for a local user. Location: E:\Misc\WriteFolder\Appended_Document. The user needs to be able to add (append) new data to the original data without being able to (literally) read the data in the original document. Please help, this is sending me off the deep end. MS no help.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

This can maybe work...

by Jabbar In reply to Need W2K Pro Permissions ...

Try to go in your control panel, then in your administration tools, then in the "computer management", and finally in your shared files.

Here you can allot permissions to the shared file you want to secure.

Try to allow all permissions (total control, read, write...), but after that, refuse the read box in your permissions. The refusal to read is more important than the permission ta read.

I hope it will work.

Collapse -

Yes and No

by LordInfidel In reply to Need W2K Pro Permissions ...

There is a way that they can add files without being able to view/read or modify the file.

However, there is **no way** to allow them to "append" to a file without being able to view/delete the original contents of the file.

The only way to dothat is to use a db with custom programming.

So let's say they create a text file on their local machine (cantread.txt) with the text:

I can not read.

They can save that file in the location with the restrictive permissions.

But if they try to open the file in that location. They can not (they will get an access is denied and a blank txt file). Which means they can not edit it the original nor read it.

To achieve this, go to properties/security/add the user/group, go to advanced.

You want to edit their permissions with:
apply onto: this folder, sub folders and files
List folder
Create Files/Write Data

Side effects-
1. they can not copy the file from the restricted area. (this require read extended, which then gives them ability to read the entire file and alter it)

2. They can not open a file in that location and read it.

3. All additions need to be done on the local drive and then copied over to restricted folder with a different file name.

I know this is not exactly what you were looking for. But what you are asking simply can not be done without using a custom db with programming.

Collapse -

Accomplished So Far...

by Carroll In reply to Need W2K Pro Permissions ...

Here's what I've achieved so far thru various combinations of permissions/advanced permissions on the folder, original file in the folder and the new file with data to be appended to the original.
Creation of a "drop folder" with the following results: 1) totally new files can be successfully dragged to the folder, 2) a new file can overwrite an existing file with the same name(not append the new data), 3) access denied, 4) same file name, choose another.
According MS help (Special permissions for files and folders), the Append Data part of Create folders/Append Data under advanced permissions applies to files only and "...allows or denies making changes to the end of the file but not changing, deleting, or overwriting existing data...".

Collapse -

you lost me on 3/4

by LordInfidel In reply to Accomplished So Far...

I can appreciate what you are trying to do. But my knowledge of file permissions plus my testing tells me it can't be done.

If you take the special permission verbatim:
Append Data allows or denies making changes to the end of the file but not changing, deleting, or overwriting existing data (applies to files only).

Then you will be misled into beleiving that this can be done.

When essentially it means, you can open a file and add data to it, but you can not overwrite the file. Which means you have to save it as a new file. And you can see the old information that was there, modify it and save it as a new file.

But the old file will remain. And the old file will not contain any of the new data.

Related Discussions

Related Forums