Folder permission brain fart

[OllyM]

Hi all

 

We're redoing the permissions on one of our network drives. It's the drive from hell and has that organic growth and mess that comes from years of people pretending that it doesn't exist but actually knowing that people dump everything there.

 

I'm mapping the permissions on a spreadsheet and I'm having a brain fart about permissions. If I have a parent folder with three child folders, and a user needs read access to Child1 but no access to Child2 or Child3, I can give Read permission to the Parent folder, allow inheritance, and then Deny that user access to Child2 and Child3, right?

 

If I give the user *only* read permission to Child1 (ie they have no permissions for the other folders) they will be able to access Child1 but only via direct access, they can't browse to the parent then browse to Child1, they'll have to manually enter \parent\child1 or use a shortcut.

 

Is that all sane and right?

 

When I shut my eyes I see folder names and groups

 

Olly

[Sagima]

pretty much

 

You can give them traverse rights so they can navigate through the folder but not do anything in it and just read to child1