Assigning Special Permissions
some situations, you might want more fine-tuned control over a user’s
or group’s permissions. For example, you may want to allow a user to
add new files to a folder, but not new subfolders. Similarly, you may
want to give a user full control over a file or folder, but deny that
user the ability to change permissions or take ownership of the object.
these more specific situations, Windows 7 offers a set of 14 special
permissions for folders, and 13 special permissions for files:
Full Control— A user or group can perform any of the actions listed below.
Traverse Folder / Execute File— A user or group can open the folder to get to another folder, or can execute a program file.
List Folder / Read Data— A user or group can view the folder contents or can read the contents of a file.
Read Attributes— A user or group can read the folder’s or file’s attributes, such as Read-Only or Hidden.
To see a file’s or folder’s attributes, right-click the item, click Properties, and then display the General tab.
Read Extended Attributes— A user or group can read the folder’s or file’s extended attributes. (These are extra attributes assigned by certain programs.)
Create File / Write Data— A user or group can create new files within a folder, or can make changes to a file.
Create Folders / Append Data—
A user or group can create new subfolders within a folder, or can add
new data to the end of a file (but can’t change any existing file data).
Write Attributes— A user or group can change the folder’s or file’s attributes.
Write Extended Attributes— A user or group can change the folder’s or file’s extended attributes.
Delete Subfolders and Files (folders only)— A user or group can delete subfolders and files within the folder.
Delete— A user or group can delete the folders or file.
Read Permissions— A user or group can read the folder’s or file’s permissions.
Change Permissions— A user or group can edit the folder’s or file’s permissions.
Take Ownership— A user or group can take ownership of the folder or file.
Here are the steps to follow to assign special permissions to a file or folder:
In Windows Explorer, display the file or folder you want to secure.
the file or folder, and then click Properties. (If you have the folder
open, you can select Organize, Properties, instead.)
Display the Security tab.
Click Advanced. The Advanced Security Settings for Object dialog box appears, where Object is the name of the file or folder.
In the Permissions tab, click Change Permissions.
Click the existing permission you want to edit.
Click Edit. The Permission Entry for Object dialog box appears.
Use the check boxes in the Allow and Deny columns to assign the permissions you want for this user or group, as shown in Figure 4.
Figure 4. Use a file or folder’s Permission Entry dialog box to assign special permissions for a user or security group.
Click OK in all the open dialog boxes.