Posts made by fs483

@scottalanmiller
Thanks for the Info Scott. Will have to look into maybe an alternative.

Hello,
Trying redo some folder permissions. Right now when an employee requires access to the contents of a child folder but is not allowed to seeing the contents of the parent folder, I assign a security group to the child folder. Then I add the employee to that group. Next I give the direct path to that folder to the employee and it works. We are getting more and more requests to allow temp employees to access certain child folders from many different parent folders and giving a direct path to each of those folders is becoming hard to manage. I'm trying to get the traverse folder right working properly and getting pretty close. So lets say I have the following file structure : Corporate_Data which is a share. Inside Corporate_Data, I have parent folder called Projects. Inside Projects I have 2 child folders, one called Alpha and the second one called Beta. All permanent employees have access to the contents of Corporate_Data. We hire a new temp that should only have access to Alpha but not Beta. I disable inheritance and select Remove all inherited permissions on Projects folder. I add Read/Execute, List folders contents, Read, Traverse folder/execute file, list folder / read data / read attributes, read extended attributes and read permissions and apply it to This folder only. Now the temp employee is able to see the name Projects and when he goes into Projects, he only see Alpha. The folder called Beta and any files at the same level as Alpha and Beta are not visible. That's excellent and what I want. However now the rest of the permanent employees can't se the Projects folder anymore because all inherited permissions were removed. Now one solution is to create a new security group and add all the permanent employees into that group and add that security group to Projects. That becomes a pain because if we hire a new permanent employee, I will have to add him to Corporate_Data AND to the new security group for the Projects folder. Am I missing something?

Thanks,
Anthony