Does any MS document clarify the behavior when a parent allows DELETE CHILD on an object but the object has a DENY DELETE

Richard Sharpe realrichardsharpe at gmail.com
Wed Jun 15 18:29:01 UTC 2016


Hi folks,

A quick look at MS-DTYP does not clarify this question for me.

What is the actual behavior when you have a directory, D, with an
object O in it, and the DACL on D allows DETELE_CHILD for user U but O
has a DENY DELETE ACE for user U in its DACL?

-- 
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)



More information about the samba-technical mailing list