Flexible folder permissions?

[mrbios]

So I've just been asked if i can password a folder, i wish i said.

 

Told the user all about the flexibility of folder permissions, but that doesn't appear to be ideal, so does anyone have any bright ideas for how i could work around this:

We have a folder that two users need to manage, other staff need to be able to access this folder on a per-request basis and then be removed from access once that request expires. That access could change on a daily basis. The data in this folder is sensitive.

 

I was considering making a little VB program that changes permissions using setACL or something and had a "remove all" button that just left the two users will full rights and denied everyone else, but i just don't have the time to do that at the moment and they want it by the end of the week, so any ideas that would be quick and simple?

[win]

Easiest option would be to ask them to password protect the document - assuming it is word/excel

[Domino]

If you've sharepoint you could give the users control of permissions on a doc library?

[mrbios]

Easiest option would be to ask them to password protect the document - assuming it is word/excel

 

Loads of documents though, would be a nightmare to password protect them all, not to mention changing the passwords every time people are given access then want it rescinded

 

If you've sharepoint you could give the users control of permissions on a doc library?

 

I think it's a part of users 365 logins, but we've never used it sadly and due to that would probably come under my same excuse as not wanting to make the vb program (other than that, no sharepoint install within school)

 

Sadly the VLE is new and I'm yet to use it at all myself so I've no idea if there's any functionality there that may help (although i guess i'd be reluctant to put these documents online anyway)

Edited October 20, 2014 by mrbios

[Davit2005]

Base folder permissions on Groups, this would give you flexibility of adding/removing users from the group without fear of mucking up the permissions on the folder.

 

TBH most departments here are quite happy with that with only a few individuals going the extra step and encrypting.

[sted]

Stuff all the files in a password protected zip file?

create a group called allowed users and give that permissions and add/remove staff from that group as required?

[Iain]

Can you not base the access on the folder to a security group, and then delegate membership control of the security group to the two managing users?

[synaesthesia]

We have one of these and use a truecrypt volume. The zip folder was oddly unworkable.

[mrbios]

Can you not base the access on the folder to a security group, and then delegate membership control of the security group to the two managing users?

 

That sounds like the best option, how do i give the users access to modify the security group? I know how to delegate control or make a user a group manager but i can't think how i actually give them access to that security group beyond giving them AD....

[FN-GM]

We have one of these and use a truecrypt volume. The zip folder was oddly unworkable.

 

Truecrypt has not finished. An alternative would be 7-ZIP