First, disable inheritance on the topmost folder and do not copy inherited entries. Then add these access control entries:
- Allow SYSTEM full control over "this folder, subfolders, and files"
- Allow Administrators full control over "this folder, subfolders, and files"
- Allow Users "list folder contents", "read & execute", and "read" on "this folder only" (or "this folder, subfolders, and files" if you want everyone to have read access to each others' stuff)
- Allow CREATOR OWNER full control over "subfolders and files only"
- Allow Users "create folders / append data" on "this folder only"
The last entry is what allows users to create their own folders, while the second to last is what gives them full control over the contents.
Based on my Super User answer.
No comments:
Post a Comment