Ok, I think I understand the issue a bit better now. What I'd recommend is you start with the largest group of users possible and work your way down. Start by granting read to authenticated on A. This will give all of your users read access to the entire tree, so you don't need to worry about that. For special cases, such as Carl, you'll need to modify the permissions further down. Grant Carl write access to C1 and deny him read access to B2. The consequence of the way inheritance works in Slide is that you're going to have a lot of "deny" permissions to keep people out of certain areas.
-James Yong Hu wrote: > Thanks for answer, James. But our requirement is something different, > our problem is: > 1. privileges on folders SHOULD be inherited automatically, this is the requirement > for example, > >>>>A - grant read to authenticated (gives all valid users access) >>>> B1 - nothing. inherits from A. >>>> C1 - grant write to Carl >>>> B2 - grant read to root (make sure someone has access) >>>> - deny read to authenticated (makes this private) > > > If user Allen has privilege on A, then automatically, he should have access to B1, > C1 and other A's subfolders. > > 2. Now I want to grant write privilege on C1 to Carl, Slide said we have to assign > read on A and B1 to Carl to > make this work. > > 3. When we assign read on A and B1 to Carl, because Slide will always assign an > INHERITABLE privilege, > Carl will has INHERITABLE read privilege on A. If we don't set deny on B2, then B2 > will become readable > to Carl - this is not what we want. > > 4. So I've to set Deny on B2. The problem is if I set Deny to authenticated to B2, > then Allen will not see B2 anymore, > this is not what we want. > > 5. So in order to let Allen able to see B2, we will assign read privilege on B2 to > Allen explicitly, which means we > can't using Slide's INHERITANCE to implement our requirement's inheritance. For each > inheritance we need, > we will have to, in silde, to assign privileges to user explicitly. > > Now you see our problem? :-( > > Thanks again for all your quick replys. > > regards, > > Jun > > > > > --------------------------------- > Do You Yahoo!? > 150万曲MP3疯狂搜，带您闯入音乐殿堂 > 美女明星应有尽有，搜遍美图、艳图和酷图 > 1G就是1000兆，雅虎电邮自助扩容！ --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
