Sunday, June 7, 2009

icacls inheritance rights

There are five basic permissions for icacls. F (full access), M (modify access), RX (read and execute access), R (read-only access) and W (write-only access). These are very straight forward.

There are also four inheritance rights. (OI) object inherit, (CI) container inherit, (IO) inherit only, (NP) do not propagate inherit.

(OI) applies to the target folder, files in the target folder and files in sub folders. Doesn't apply to sub folders.

(CI) applies to the target folder and sub folders. Doesn't apply to files in the target folder or files in sub folders.

(IO) does not work on it's own.

(IO)(OI) applies to all files in the target folder and files in sub folders. Doesn't apply to the target folder or any sub folders.

(IO)(CI) applies to sub folders. Doesn't apply to  the target folder, files in the target folder or files in sub folders.

(NP) applies to the target folder only. Doesn't apply to sub folders, files in the target folder or files in sub folders.

(OI)(CI) applies to the target folder, sub folders, files in the target folder and files in sub folders.

No comments: