Understanding File and Folder Permissions
The basic permissions you can assign to files and folders are summarized in Table 13-3. File permissions include Full Control, Modify, Read & Execute, Read, and Write. Folder permissions include Full Control, Modify, Read & Execute, List Folder Contents, Read, and Write.
Anytime you work with file and folder permissions, you should keep the following in mind:
-
Read is the only permission needed to run scripts. Execute permission does not matter.
-
Read access is required to access a shortcut and its target.
-
Giving a user permission to write to a file but not to delete it does not prevent the user from deleting the files contents. A user can still delete the contents.
-
If a user has full control over a folder, the user can delete files in the folder regardless of the permission on the files.
Table 13-3 File and Folder Permissions Used by Windows 2000
Permission
Meaning for Folders
Meaning for Files
Read
Permits viewing and listing of files and subfolders
Permits viewing or accessing of the file\'s contents
Write
Permits adding of files and subfolders
Permits writing to a file
Read & Execute
Permits viewing and listing of files and subfolders as well as executing of files; inherited by files and folders
Permits viewing and accessing of the file\'s contents as well as executing of the file
List Folder Contents
Permits viewing and listing of files and subfolders as well as executing of files; inherited by folders only
N/A
Modify
Permits reading and writing of files and subfolders; allows deletion of the folder
Permits reading and writing of the file; allows deletion of the file
Full Control
Permits reading, writing, changing, and deleting of files and subfolders
Permits reading, writing, changing and deleting of the file
Source: https://msdn.microsoft.com/en-us/library/bb727008.aspx
To protect the data information, we strongly recommend to assign a right permission