Folder Access Settings

• To grant folder access to additional users or groups:
  1. In the left pane, click FOLDERS. In the list of folders, click the gear icon for the folder. Locate the Edit Folder Access section.
  2. In the list box that contains names of users and groups, select a user or group.
  3. In the row of empty checkboxes, make selections for the access permissions that you want to grant to the selected user or group. Click Add Access.

     The user or group name appears in the User column, with an X in each column for the assigned permission.

Access Types:

• Read: Allows this user/group to read files from this folder.
• Write: Allows this user/group to upload files into this folder.
• Delete: Allows this user/group to delete files from this folder.
• List: Allows this user/group to list which files are in this folder.
• Notify: Sends an email notification to this user/group if new files are uploaded to this folder. Notify permissions work a little differently if used on home folders: files uploaded to home folders are only considered new to non-owners if they are uploaded by folder owners. For example, if "George" uploads a file into "Fred's" home folder and "Jane" has notify permission, "Jane" will not get a notification. However, if Fred uploads a file into his home folder, "Jane" will get a notification.
• Subs: Allows this user/group to add, rename, and remove subfolders in this folder.
• Admin: Allows this user/group to manage the settings of this folder. If you wish to delegate the ability to designate who should be able to access this folder (i.e., change folder permissions) to particular users, you must also promote those users to GroupAdmins.

"Extra Delete Permission" Rule:

Although DELETE permissions can be explicitly assigned, they are often used as derived permissions instead. The following rule is used to grant additional delete permissions:

If a user is granted ADMIN permission to a folder, that user or group will be granted DELETE permissions as well.

"Limited List Permission" Rule: Although LIST permissions can be explicitly assigned, they are also used as derived permissions instead. The following rule is used to award additional LIST permissions on "write-only" folders:

• If a user is granted WRITE permission to a folder, that user or group will be granted limited LIST permission to that folder as well. In this case, the limited LIST permission granted on the folder allows users to view all files that user has uploaded, but no files that any other users have uploaded. This behavior may be turned off on a user-by-user basis by checking the shared flag on any user account; when this option is checked, the user does not have limited LIST permissions.

Implicit permissions cannot be changed or removed.

Explicit permissions can be edited, which means you can change the permissions assigned to that user or group. Explicit permissions can also be removed from a user or group.

Note: Instead of granting USERs permission, you can also grant GROUPs permission.
Best practice: Create groups, add users to groups, and grant folder permissions to groups.

If multiple type of access to a folder are granted to a single user (for example, through user AND a group), file permissions are combined.

Inherit Access From Parent checkbox

Subfolders might have an Inherit Access From Parent option, which causes access to this folder to be controlled by the access setting of the folder's parent folder.

• If you want subfolder permissions to override parent folder permissions, deselect this checkbox and click Change Value.

Subfolders might have an "Inherit Access From Parent" option. When checked, this option will cause access to this folder to be completely controlled by the access settings of this folder's parent folder. (i.e. "ActiveHEAT\Release" access might be controlled by "ActiveHEAT" access rules.) This option MUST be UNCHECKED (if available) if subfolder permissions are to override parent folder permissions..

Overriding Home Folder Permissions

The default permissions applied by the organization to a home folder owner can be added to or overridden for individual users.

• To override home folder permissions for a user:
  1. Click FOLDERS. In the Go to Folder box, select the user's home folder. The home folder page opens.
  2. Click Permissions and Settings. The foldername Settings page opens. Locate the Edit Folder Access section.
  3. In the row that lists the Home folder user, on the right, click the Override icon .

     The Edit Folder Access page opens for the user, showing the permissions currently held for the home folder.

  4. Select or deselect the checkboxes for the permissions to grant to the owner of the home folder.

     CAUTION: If you remove (deselect) all permissions, the user will not be able to see their home folder, or upload to/download from it.

  5. In the Permission Behavior section, make a selection:
     • Override inherited permissions. The explicit permissions you selected replace the default organization permissions.
     • Add to inherited permissions. The explicit permissions you selected supplement the default organization permissions.
  6. Click Change Permissions.