Thanks for answer, James. But our requirement is something different, our problem is: 1. privileges on folders SHOULD be inherited automatically, this is the requirement for example, > > > A - grant read to authenticated (gives all valid users access) > > > B1 - nothing. inherits from A. > > > C1 - grant write to Carl > > > B2 - grant read to root (make sure someone has access) > > > - deny read to authenticated (makes this private)
If user Allen has privilege on A, then automatically, he should have access to B1, C1 and other A's subfolders. 2. Now I want to grant write privilege on C1 to Carl, Slide said we have to assign read on A and B1 to Carl to make this work. 3. When we assign read on A and B1 to Carl, because Slide will always assign an INHERITABLE privilege, Carl will has INHERITABLE read privilege on A. If we don't set deny on B2, then B2 will become readable to Carl - this is not what we want. 4. So I've to set Deny on B2. The problem is if I set Deny to authenticated to B2, then Allen will not see B2 anymore, this is not what we want. 5. So in order to let Allen able to see B2, we will assign read privilege on B2 to Allen explicitly, which means we can't using Slide's INHERITANCE to implement our requirement's inheritance. For each inheritance we need, we will have to, in silde, to assign privileges to user explicitly. Now you see our problem? :-( Thanks again for all your quick replys. regards, Jun --------------------------------- Do You Yahoo!? 150万曲MP3疯狂搜，带您闯入音乐殿堂 美女明星应有尽有，搜遍美图、艳图和酷图 1G就是1000兆，雅虎电邮自助扩容！
