Software

Ask something
Question Locked

Domain Users versus Power Users

0 helpful
2 replies

by redhat

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

A company has 2 types of employees, regular and accounting. They both store their files in folders labelled by customer name "ABC Co" etc. The accounting employees don't want the regular employees to access their files, but accounting also needs to access files created by the regulars.

I think I can restrict access to certain files that the accounting group "owns", simply by selecting the security settings of those files and removing the regular group from the ACL (permissions list).

But how would I make sure the accounting group had access to the regular groups files? Do I simply make the regular security group a member of the accounting security group, or does that open a hole for the regular users to access accounting files?

And is there a way to set the security class of new files created by the accounting security group, if they are saved in the common folder, i.e. since they are a member of the regular group, it seems the files they create are open to anyone in the regular group.

Or should I have them put their files in a separate folder and set security on that folder and child files inherit the permission, so only accounting can access within that folder? They would rather have only 1 folder per customer, instead of regular/customers/abc and accounting/customers/abc, etc...

thanks for your suggestions

2 replies

by jasonjd48

I would think you might just have to have a child folder in the each company's folder, with the regular group permissions removed. To have all files in one folder and restrict only certain files would require editing each file's permissions which would be time consuming. Just make Company ABC and then a child in Company ABC called Company ABC Accounting.

This discussion is closed to new replies.