On Thu, Jul 10, 2014 at 9:27 PM, Damien Solodow
<[email protected]> wrote:
> Give them traverse folder on the parent.

  "Traverse" just lets you access a folder's contents you might have
other permission to, not see them, so they still wouldn't be able to
get to the child folder by clicking through from parent folders.

  Windows ships with "Bypass traverse checking" enabled by default, so
the "Traverse" permission is ignored anyway.  Turning traverse
checking on breaks all sorts of things (including parts of Windows
itself), so the whole thing is kind of useless.

> You might also need to give them list contents on "this folder only".

  Bingo.  And as was suggested, Access-Based Enumeration will hide the
things they don't have access to.

-- Ben


Reply via email to