290 Exam question

[Teknoratti]

I am having a difficult time understanding how explicit perms take precedence over inherited perms. Take this scenario for instance.

There are two folders, Test 2 and Test 3. Test 2 is a child folder of Test 3, with inherited perms from Test 3.
We have user1 which has been set deny perms on Test 3. The rule says that if deny perms are inherited we can still provide access by adding an explicit allow perm on the child.

O.k fine, we go to Test 2 and assign an explicit allow perm.

How can user1 get to the Test 2 folder if the deny perms have been set on Test 3?

Parent folder: Test 3 = Deny perms
Child folder w/ inherited perms: Test 2 = explicit allow.

 

[TheMisio]

Hi there,

The most important part of your scenario is that the child object inherits permissions from its parent folder. If a user is denied access on the parent folder level, it will override any permissions on the child object. This is because the less permissive rights will always be applied. Same, if you grant allow permissions on the parent folder but deny on the child object, the access to the child object will be denied, even if the permissions are being inherited from the parent object.

Be very careful on the exam, especially when it comes to group nesting and stuff. It can be very confusing.

Hope this helps.

Regards,

Michael

 

[Teknoratti]

TheMisio,

But see that's whats bugging me b/c M$ tells us that explicit permissions set on an objet override permissions inherited from the parent, and if our first example is true it wouldn't matter what perms you had on the child folder, or file, if you are denied into the parent folder, how can you possibly get into the child folder which is inheriting permissions from the parent?

I guess I have to look at this scenario from another perspective.

 

[Future00]

You can traverse folders that are parents that are Explicit denies allowing you to still get to the child folder with the allow perms.

Ryan

MCP/MCDST/MCSA 2003