File permissions to allow save-as only in a folder 1

[RSeymour]

Hello, and thanks in advance for any answers.

I need to find a balance of permissions on our file server to allow users only the rights below:

- Copy a new file into a folder
- Open and read any file in the folder
- Make a save-as copy of any file into the same folder

The idea behind this is that users can add new documents to a shared location (legal documents) but cannot make modifications without saving them with a new version number.

I have managed to get it to the point where all the criteria are satisfied except the save-as requirement. When performing a save-as the file is created but is not populated with any data and the file itself cannot be opened. The permissions I have set so far are:

Allow
- Traverse/Execute
- List folder/Read data
- Read attributes
- Read extended attributes
- Create files/write data
- Read permissions

Deny
- Delete subfolders and files
- Delete
- Change Permissions
- Take ownership

The server is Win2003 Enterprise SP2 with a plain vanilla 2003 AD implementation. The volumes are fibre attached SAN disks formatted as basic NTFS. All users are domain authenticated.

I realise that the folder will rapidly fill up with files that nobody who isn't an admin can delete but that is what they want. Any ideas?

 

[TechyMcSe2k]

Unfortunately, I am afraid that the requirement could not be met because of
the way that Office saves files. When you modify and then save a Word
document, the following happens:

1. Word builds a new temporary file using the edited version of the
document.

2. After Word creates the temporary file, Word deletes the previous version
of the document.

3. Word renames the temporary file to the same name as the previous version
of the document.

According to the above work process, we can see that the Delete permission
is required to modify and save a Word document. In other word, if you
permit a user to save modification you will also need to permit a user to
delete the file. Unfortunately, this behavior is designed and could not be
modified. Thank you for your understanding.

For more information, please refer to the following Microsoft Knowledge
Base article:

A description of the way that Excel saves files

http://support.microsoft.com/kb/814068

You receive an error message when you try to save a file in Excel

http://support.microsoft.com/kb/214073/

WD: How Word for Windows Uses Temporary Files

http://support.microsoft.com/kb/211632

Reference Post (Credit):

http://forums.techarena.in/windows-server-help/967665.htm

 

[RSeymour]

Thank you for the extremely considered and comprehensive answer TechyMcSe2K. It looks like I have no option other than SharePoint.

Cheers