Skip to main content

Configuring File System Permissions

Permissions on files and folders include Full Control, Modify, Read and Execute, List Folder Contents, Read and Write. Each of these includes special permissions which can be reached by using the Advanced Tab on the Permissions Property sheet. You only need to be familiar with a few of these:

  • Traverse Folder/Execute: this permission allows users to traverse the folder structure to reach the designated file/folder. The user must have the Bypass Traverse Checking right in order to perform this activity.
  • List Folder/Read: for folders, this will dictate if the folder contents can be viewed. For files, it dictates if the file itself can be read.
  • Create Files/Write: allows the creation of files in a folder, or the writing of content to the file.
  • Take Ownership: allows the user to take ownership of the file/folder.
  • Synchronize: this is used in multi-threaded apps, and allows different threads to access the file while others have control of the data.
Special Permissions Full Control Modify Read and Execute List Folder Contents Read Write
Traverse Folder/Execute File X X X X
List Folder/Read Data X X X X X
Read Attributes X X X X X
Read Extended Attributes X X X X X
Create Files/Write Data X X X
Create Folders/ Append Data X X X
Write Attributes X X X
Write Extended Attributes X X X
Delete Subfolders and Files X
Delete X X
Read Permissions X X X X X X
Change Permissions X
Take Ownership X
Synchronize X X X X X X

Permissions are set on files/folders by right-clicking, and then selecting Properties. Choose the Security Tab, and this will allow you to set permissions on the object.

The activities given on this page and the following pages can contribute towards your log book for this unit. You must configure file system permissions, verify effective permissions and change ownership of files and/or folders.

Next: Verifying Effective Permissions