Read Only for all but creator of original file

I need to accomplish the following:
 The goal is for us all to have access to read all the files associated with the audit. Only person posting the file should be able to modify it.
Would this be:
Everyone: Read/Write/Create
Owner: Modify/Delete
As right now they all can read/write/delete any document they would like.

Ah, I see. I'll clarify: you're supposed to set these permissions on the topmost folder
where your users are supposed to create files:
This folder and subfolders:
Everyone - Read and Execute, Create files
Files only:
Everyone - Read and Execute
CREATOR OWNER - Modify
The end result is that users can create files in that folder and all its subfolders - they cannot create folders, but they can read everything. Now, when a user creates a
file in this folder structure, that user and that user only will automatically get Modify on that particular file (the CREATOR OWNER permission is translated to that user account in the ACL).
An example:
Let's say your topmost folder is D:\Data\Users. You apply the above permissions to
this folder. Then, a user with the account name YOURDOMAIN\User1 comes along and creates the file "MyTasks.txt" in this folder. That file will then have the following permissions:
Everyone - Read & Execute
YOURDOMAIN\User1 - Modify
As you can see, there is no need for any special groups. Try it out!

Similar Messages

  • Make UDF Read-only for all users

    Hi
    Can i use any script to make a UDF read-only for all users?
    i am looking at CPRF and CUFD Tables
    thanks

    Hi,
    You should never try updating system table directly.  That will against supporting policy by SAP.
    Thanks,
    Gordon

  • All USB drives mount as read only for user

    I have searched a bunch and thee results I find seem to be irrelevant to my situation. Most relate to a single USB media that is a problem and won't read or write.
    On a new Arch install on a new computer (my third base system install). Running Gnome.
    All USB mass storage devices mount as read only for the logged in user. Root has write permissions and I can mkdir no problem. It is not an issue with the USB drive itself as this occurs with multiple USB media (I've tested several SD cards on a reader and at least two drives, all the media works correctly on my existing installations)
    I'm posting the contents of my /etc/group file in case there's an obvious error there I don't see, and my dmesg output upon plugging in the drive. User name is changed in the group file posted to "archie"
    This is a single-user system.
    /ect/group
    root:x:0:root
    bin:x:1:root,bin,daemon
    daemon:x:2:root,bin,daemon
    sys:x:3:root,bin
    adm:x:4:root,daemon
    tty:x:5:
    disk:x:6:root
    lp:x:7:daemon
    mem:x:8:
    kmem:x:9:
    wheel:x:10:root,archie
    ftp:x:11:
    mail:x:12:
    uucp:x:14:archie
    log:x:19:root
    utmp:x:20:
    locate:x:21:
    rfkill:x:24:
    smmsp:x:25:
    http:x:33:
    games:x:50:
    lock:x:54:
    uuidd:x:68:
    dbus:x:81:
    network:x:90:
    video:x:91:
    audio:x:92:
    optical:x:93:
    floppy:x:94:
    storage:x:95:
    scanner:x:96:
    power:x:98:
    nobody:x:99:
    users:x:100:archie
    systemd-journal:x:190:
    archie:x:1000:
    avahi:x:84:
    polkitd:x:102:
    rtkit:x:133:
    gdm:x:120:
    brlapi:x:999:
    kvm:x:78:
    ntp:x:87:archie
    dmesg output
    [ 968.044188] usb 4-3: new high-speed USB device number 4 using ehci-pci
    [ 968.170628] usb-storage 4-3:1.0: USB Mass Storage device detected
    [ 968.171435] scsi7 : usb-storage 4-3:1.0
    [ 969.174450] scsi 7:0:0:0: Direct-Access Generic USB SD Reader 1.00 PQ: 0 ANSI: 0
    [ 969.175068] scsi 7:0:0:1: Direct-Access Generic USB MS Reader 1.03 PQ: 0 ANSI: 0
    [ 969.939417] sd 7:0:0:0: [sdb] 15572992 512-byte logical blocks: (7.97 GB/7.42 GiB)
    [ 969.941028] sd 7:0:0:0: [sdb] Write Protect is off
    [ 969.941037] sd 7:0:0:0: [sdb] Mode Sense: 03 00 00 00
    [ 969.944664] sd 7:0:0:1: [sdc] Attached SCSI removable disk
    [ 969.945509] sd 7:0:0:0: [sdb] No Caching mode page found
    [ 969.945517] sd 7:0:0:0: [sdb] Assuming drive cache: write through
    [ 969.952682] sd 7:0:0:0: [sdb] No Caching mode page found
    [ 969.952693] sd 7:0:0:0: [sdb] Assuming drive cache: write through
    [ 969.956396] sdb: sdb1
    [ 969.965003] sd 7:0:0:0: [sdb] No Caching mode page found
    [ 969.965011] sd 7:0:0:0: [sdb] Assuming drive cache: write through
    [ 969.965015] sd 7:0:0:0: [sdb] Attached SCSI removable disk
    I'm sure I'm just missing something in user management, but I can't find what.
    Last edited by hooya (2014-04-27 03:10:49)

    I am also having the same problem. Root can read and write to automounted drives, but my user cannot. I've tried with a variety of drives, I am assuming they are being automounted by root instead of the logged-in user somehow. (I am running x directly, and am not using a display manager, if that has anything to do with it).
    When I look at how it is mounted it is as follows:
    /dev/sdc1 on /run/media/myuser/drivename type vfat (rw,nosuid,nodev,relatime,uid=1000,gid=1000,fmask=0022,dmask=0077,codepage=437,iocharset=iso8859-1,shortname=mixed,showexec,utf8,flush,errors=remount-ro,uhelper=udisks2)

  • Lion administrator setting changed to read only for file sharing. Now hung machine

    I was trying to network my Mac with a WIndows 7 machine and tried to have my name in the file sharing read write instead of other users such as administrator   when I changed the administrator to read  only for file sharing rights and could not add my name as a file sharing user with read write permissions Really silly move
    I have performed a repair of disk permissions however still hung.
    Whats worse is that my time machine for the last three days has been disconnecting when backing up leaving a partially complete backup. Backup failed. I also left a apple support community message a few days ago to solve it.
    So its critical
    Timely HELP is needed.

    This same problem happened to me, all the sudden one day my mac decided to revert to the original standard root username and password which I obviously did not know. In order to change this:
    1) Activate single user mode on reboot as by pressing cmd + s as your computer starts up. Make sure you do it right away, and keep the keys pressed down.
    2) Where the cursor pops up, type exactly
    +/sbin/mount - uw/+
    3) When the next cursor pops up type exactly
    passwd
    4) Then you can type any password you want (now changing the root password to be what you want)
    Note you will not be able to see what you type, but the text is being recognized
    5)The computer asks for you to retype the password, retype it
    6) Type reboot
    Once the computer restarts you can navigate to system preferences>accounts> and then unlock the account (lock is located on the bottom left corner) using Username: root and the password you just set. Henceforth, you can appoint your account as the administrator. Hope it works!

  • Howto make created folders/ files from one teacher, read only for other teachers?

    Hello there,
    as an admin @ school I was wondering how to make created folders/ files from one teacher, read only for other teachers?
     - In a 2008domain, created a group "teachers"
     - created a folder "teacher data" where all teachers have read/write permissions
    ideal,a teacher who make's a folder in "teacher data" should be the only oen who is able to add file's to that folder and dele that folder or files. Other teachers may be able to read the content of the folder.
    Is this possible to set up and how?
    many thanks.
    Nico.
    rds

    Hi Nico,
    You could set the permissions below to resolve the issue:
    For the root folder "teacher data": give the full control permission to CREATOR OWNER – "Subfolders and files only" and give the read/write permissions to the group "teachers"– "This folder only".
    Best Regards,
    Mandy 
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Change public share access to read only for public and full access to selected users

    Hi, new to the community just purchased a recertified WDMyCloud 2TB after my 2 years old MyBookLive 2TB HD died due to accidental power cable unplugging. I've got everything setup including MiniDLNA by following instructions on this forum and everything is working  exactly as I want it to except public share. I want public share to be set to read only access for public and full access to certain users (just myself at the moment) and having a "upload" folder within this share with full public access to everything in this folder would be a bonus. I tried login in to ftp with root user and removing write permission for public but that blocks me out as well. I'm sure it's possible by doing some majic on SSH but I wouldn't have a clue so hoping someone here would be able to help me out.

    Mr_Khan wrote:
    What i want is public to have read only access to file server. Public as in users who do not have a user account on mycloud. E.g someone who connects to to my home network for the first time and is able to browse and download content from public share. I'm aware of being able to set indivual access to shares for users like full access, read only and no access but public users won't have a user account.Through the My Cloud UI interface what you seek to do is not possible. The public share like all other share folders are an all or nothing affair when using the adminstration UI. When using the administration UI you do not have granular control on shared folders to limit non users to read only access or set permission levels for subfolders. The workaround to do what you seek and have the public folder set for read only is to change the folder settings via SSH. It may take some work to set the folder security so that users can read/write to the public folder while the guests only have read access. However, if you reboot the WD My Cloud or update the WD My Cloud firmware those settings may be reset back to the default settings where the entire public folder is read/write for all. There are way to prevent this but again it will take a bit of coding to do so via SSH. See this link (even though its for the WD My Book Live) for a starting point on how to use SSH to change the permission levels on the public folder. Another option if one doesn't go the SSH route is to turn off public sharing for the public folder then create a "guest" user account and give that "guest" account read only access to the public folder while all other user accounts have full read/write access.

  • Have one WiFi signal into the apartment for my Air, and another wifi signal for my 5c phone plan. Both from the same provider. Expensive. Is there a way to 'combine' WiFi signals so I pay only for one, but can get on the Internet with my Air?

    Have one WiFi signal into the apartment for my Air, and another wifi signal for my 5c phone plan. Both from the same provider. Expensive. Is there a way to 'combine' WiFi signals so I pay only for one, but can get on the Internet with my Air?

    Roamingnome, thanks for your response. Although I have been a Bell (Canada) customer for my WiFi signal for years, the 5c and its necessary mobility plan, is very recent. Some years ago, Bell supplied its own ‘router’ for my computer, and claimed that it was possible to get their WiFi signal only with the router they supplied. When I recently received the 5c, I wondered if the plan it requires, which is within the much wider, overall Bell zone, could be used somehow to get my Air online - some sort of tethering? - that allows me to give up the Air WiFi service and router all together, but still get the Air connected. Here in Canada, Bell Mobility and other Bell services are very separate. Any suggestions appreciated.

  • Dynamically making read only for a field in get_data(CL_EHHSS_INC_BINFA_UI_FRM)

    Hi Experts,
    I am making read only for a field based on condition in get_data method of class CL_EHHSS_INC_BINFA_UI_FRM.
    But it is not working. Pls find the code for the same.
    LOOP AT CT_FIELD_USAGE INTO lw_field WHERE NAME = 'OC_INC_TYPE'.
       lw_field-read_only = ABAP_TRUE.
       MODIFY ct_field_usage FROM lw_field TRANSPORTING read_only.
       ev_field_usage_changed = 'X'.
    ENDLOOP.
    Pls help me what is wrong in this coding.
    Regards,
    Reny Richard

    Hi Richard,
    Please check if   this loop is executing for the correct desired event(say on click or from the start ). & the field name specified is correct or not through debugging. And check by placing the parameter ev_field_usage_changed = 'X'. after the loop statement.
    Below is a sample code for making the field read only.
    field-SYMBOLS: <fs_field> like line of CT_FIELD_USAGE.
       loop at CT_FIELD_USAGE ASSIGNING <FS_FIELD>.
         case <FS_FIELD>-NAME.
         when 'OC_INC_TYPE'. " name of the field
             <FS_FIELD>-READ_ONLY = 'X'.                " ' ' for editable
         ENDCASE.
    CV_FIELD_USAGE_CHANGED = abap_true.
    Regards,
    Harsha

  • Files or folders created by one user show as read only for others

    We are using Server version 3.2.2, we have a group call production and then we have 9 users plus the administrator account.  All users are assigned to the production group.  We have a single share called customers and the group "production" has read and write permissions for the share and also for all the underlying folders and files.
    Each user logs onto the share with their own username and password.  But, when a user creates a new file or folder on the server within the "customers" share, they are assigned read and write permissions and everyone else is assigned "no access".
    We then go into the folder on the server and assign the group "production" read and write access and life goes on, but the issue is that we should not have to.
    From this description, can anyone tell me what we are doing wrong?

    In the sidebar of the Server.app window, select the icon at the top with the name of the server. Then select the Storage tab in the main window pane.
    Navigate to the folder in question and select it. From the popup menu at the bottom with a gear icon, select
              Edit Permissions...
    Verify that the permissions are what they should be, and make changes if necessary. Then, from the same menu, select
              Propagate Permissions...
    Check all applicable boxes, including Access Control List. If in doubt, check all boxes. Click OK.

  • How to make form field read only for users with certain permissions

    We need to make two form fields read only for users with certain permissions. Kindly guide me on how to do this in Infopath. I searched and there is an option to disable to the column, but no option to select user permissions. 
    Please give your suggestion on this. 
    thanks.

    Hi,
    See the link below:
    http://info.akgroup.com/blog-0/bid/69277/InfoPath-Restrict-visibility-to-users-in-a-SharePoint-Group
    Here you can add the fomatting action on the field to disable the field if those users belong to certain Sharepoint group (does not matter the permission levels though). Hope it helps.
    Regards, Kapil ***Please mark answer as Helpful or Answered after consideration***

  • How to make a column as read only for update integrator.

    Hi All,
    i came across one issue while creating integrator.
    for update integrator i have column rowid.rowid is a parameter. by using this(rowid) i'am updating.i want to make rowid column as read only .
    if i enable read only for rowid,then it is passing null as parameter and inserting new row instead of updating the row.
    If any one came across this problem you can help me in fixing this issue.

    Hi Sanket,
    Thanks for reply.
    i have created a dummy column and passed the value of the orginal column values to dummy cloumn. and hided the orginal column.
    in this process i have come across same issue. it is not passing the value as parameter and instead of updating the row it is inserting an new row.
    Any alternate for this scenario.
    Thanks in advance.

  • READ privileges for *all the databases*

    Is it possible to grant READ privileges for all the databases objects (tables, schema, triggers, procedures, view and etc)

    SHANOJ wrote:
    Is it possible to grant privileges to all objects in one time?It depends on what you mean by 'in one time'. In one single SQL statement? No. But there's nothing stopping you issuing a billion grants one after the other in your session.
    Roles are probably better suited for this task. But are you sure you really want to grant SELECT privileges on all the tables in the database? It's more common to grant SELECT on all the 'MARKAPP' tables to the 'MARKAPP_READ_ONLY' role...

  • MY Hard Drive says_"YOU CAN READ ONLY" for the OWNERSHIP AND PERMISSSIONS!

    I cannot add anything to my EXTERNAL (SimpleDrivePS) hard drive. When I try to copy something to it, it says "The item cannot be moved because SimpleDrivePS cannot be modified."
    Upon control-clicking this external hard drive's icon, under "Get info" it says "You can read only" for it's "Ownership and Permissions."
    I have used this hard drive with Windows-based computers, but not with this new Apple yet.
    What do I need to do so that I can move or copy things to this external hard drive?
    Also, is there a discussion room for just general questions? - There are many little things that I wonder how to do from time to time as I am trying to become accustomed with Apple, like shortcut key for desktop, or where is control panel or link to "my computer" or other shortcut keys - things like that.

    Hi newsppler;
    Since I have never had a disk that was formatted NTFS, I am not absolutely sure exactly how you can discover how it is formatted. I think if you look at the disk with Disk Utility that should tell you.
    Yes. If you reformat you will lose everything that is currently on that disk.
    To reformat open Disk Utility and then select the disk. You then click the partition tab. This will allow you to select what format you wish to use. I would suggest Mac OS Extended +
    Allan

  • Change read mode for all queries

    Hello, this should be an easy question for someone.  I believe there is a way to change the "read mode" for all queries at once.
    Can you tell me how to do that ?
    Thanks very much !!
    Keith

    Hello Bhanu,
    Iam not able to change query in my BW system but when i add authorization of SAP_NEW and SAP_ALL ,then iam able to change ,can i make modification in this table and then
    change or its a authorization problem.If this issue can be resolved with changing this table, kindly tell me how i have to call this table and wt parameters to change,kindly revert at earliest.I have sent u a mail also,kindly plz check.
    Regards,
    Saumya

  • The external GPS is used only for 911 but the device will not op without it...this causes great inconvenience for me, having to run that cable to a window in the trwo houses I use it..ids there a way to disable the GPS if I do not care about the 911 funct

    the external GPS is used only for 911 but the device will not operate without it...this causes great inconvenience for me, having to run that cable to a window in the two houses I use it..is there a way to disable the GPS if I do not care about the 911 functionability..?  this is the only downside I have with the network extender and it renders my device useless..

    Nope, GPS is a Federal requirement for anything operating a cellular telephone signal.  You don't ever plan to call 911 until you are in an emergency.  I don't see that requirement changing any time soon.
    If you are truly inconvenienced by the VZW network extender then perhaps you should disable you calling features in these areas and swap over to WiFi only.  There are many services and apps out there that can route your phone services through internet service providers. 

Maybe you are looking for

  • Display bug: boxing, white screen, duplications. How can I fix?

    Having a problem with the screen stability. The bug seems to start when a few minutes or so into using a browser. I end up with duplciations of the screen and browser window sticking to my cursor, boxing and blinking of sections of my screen. This oc

  • Application error occurred during request processing.

    Hi, I got the following error when you invoke a method of a web service deployed on my local server Details:com.sap.engine.services.webservices.wsnavigator.WSNavigatorException: null Exception id: I don´t have any compilation errors in the Java sourc

  • QT 7 and higher won't play .mov data that QT 6 used to play.

    I got several .mov files along with a biochemistry book. After having updated to QT 7, QT Player won't play some of these files. The progress bar displays a progress as it used to under QT 6. There is neither audio, and the screen stays black. Howeve

  • Bug Create JSP Wizard

    In JDeveloper 11g Technology Preview 3 and 4 the Create JSP Wizard does not have the option to add tag libraries, set Error Page, HTML version as JDeveloper 10.1.3 does.

  • Renaming log file

    I am using Daily Rolling File Appender to generate log files. Currently my log files are generated as "Filename.log.date" I would like to rename this as "Filename.log.sequence of numbers" like "Filename.log.1", "Filename.log.2" and so on. Also as eac