NTFS: Allow modify but not create

[Oops_my_bad]

Hi All,

 

Anyone come across this? I am talking about NTFS and not share perms

 

Our ICT teachers want to be able to "correct" student work in their home directories - but I do not want them to be able to create files (as they will sure enough fill them (and the server) up on their behalf. We do have quotas but I want to avoid this issue.

 

Is there anyway I can set permissions to allow a file to be modifed but no new files to be created? I have tried the modify privilege but that also requires write/create

 

Thanks

[SYNACK]

I don't think that this configuration is possible under NTFS as the advanced NTFS permission is:

 

Create Files/ Write Data

 

which gives you rights for both.

[OutToLunch]

Doesn't them being able to modify students files open up a huge can of worms if any of it is for assessment? How are you going to be able to prove what was originally the students work and what has been corrected, or students who claim a teacher has deliberately made their work worse etc... Doesn't sound a fun one when it all comes back to you to figure out!

[Oops_my_bad]

Doesn't them being able to modify students files open up a huge can of worms if any of it is for assessment? How are you going to be able to prove what was originally the students work and what has been corrected, or students who claim a teacher has deliberately made their work worse etc... Doesn't sound a fun one when it all comes back to you to figure out!

 

My thoughts exactly - I almost mentioned something along those lines to the head of ICT but thought better to bite my tongue for the sake of harmony. I dont remember my teacher correcting my written maths coursework at school, why is this any different?

[altecsole]

Programs like Word create a temp file when you open it. When you save it deletes the original file and renames the temp one. So, they'd need create file and delete file permissions.

[notalot]

Yes you can

 

Go to the ntfs security click on advance click add then add the "teachers" group and give the permissions (apply on to should be this folder subfolders and files)

 

Traverse folder

List folder

Read attributes

Read extended attributes

Read permissions

 

Leave the rest blank

 

Then click add again add the "teachers" group then change the apply onto to files only and give the permissions

 

Create files

Create folders

Write attributes

Write extended atributes

 

This will only apply to files.

 

Easiest way to remember it is folders/files where there are 2 options

 

Just test this befor you apply it as im unsure what would happen for the students if they try and change it after

Edited January 15, 2009 by notalot

[Oops_my_bad]

Thanks altecsole,

 

I have noticed though when you open a word/excel file thats in a directory with read only access it doesnt seem to complain.

 

I am determined not to allow the ICT teachers to create files, as we will run out of space again from their "sharing" of video clips I have just spent most of my christmas getting the new FS setup properly to stop this from happening

 

What about a nightly script? Could one be run to delete files created by certain owners in a certain directory? Im not much good writing scripts...

[Oops_my_bad]

Thanks not a lot - I'll have a play with that now!

[elsiegee40]

Oops_my_bad: you really ought to be discussing this with your SMT. Exam boards take a very dim view of teachers having the ability to modify a student's course-work. It would not be career enhancing for you if an issue to arose and you had not attempted to do do something about it.

 

The decision to allow this must come from the SMT.