| Author |
Just to make sure...
|
|
| Riverwind6 2002-11-28, 9:50 pm |
| I came accross this question on examcram.com.
If a group has been granted rights to an object, and then a member of that group is granted specific permissions to that same object, what is the ultimate result?
A) The individual rights take precedence over the group rights.
B) The group rights take precedence over the individually granted rights.
C) The result is the least restrictive combination of the group and individual rights.
D) The result is the most restrictive combination of the group and individual rights.
They say the answer is D. I think it's C. Who's right? | |
| Tech Ranger 2002-11-29, 10:38 pm |
| Permissions are cumulative. The permissions given to a user are added to the permissions a user inherits through group memberships. Deny permissions, of course, take precedence over all other permissions. None of the answers to the stated question appear to be correct. | |
|
| quote: Originally posted by Tech Ranger
Permissions are cumulative. The permissions given to a user are added to the permissions a user inherits through group memberships. Deny permissions, of course, take precedence over all other permissions. None of the answers to the stated question appear to be correct.
answer is C my friend. | |
|
| quote: Originally posted by Tech Ranger
Permissions are cumulative. The permissions given to a user are added to the permissions a user inherits through group memberships. Deny permissions, of course, take precedence over all other permissions. None of the answers to the stated question appear to be correct.
is C the answer... read and see the logic...
if you have read persmisions but you are in the X group who have FULL permision, the less restrictive permission is full and you have full access... | |
| Tech Ranger 2002-12-04, 9:03 pm |
| My problem here is with the wording. When we evaluate share permissions in combination with NTFS perms, we add up all the share perms, subtract any denies; add up all the NTFS perms, subtract any denies. The less restrictive of the two is the effective perm. To discuss explicitly assigned NTFS perms and inherited NTFS perms, and to say "the least restrictive combo of individual and group rights", I just don't swallow the wording. The user doesn't get the least restrictive combo. He gets the sum total of everything assigned. | |
| jeff_j_black 2002-12-05, 1:15 pm |
| Yeah, I always hated the wording of this question, individual 'rights' vs. group 'permissions'. If they could have stated File/Folder (NTFS) versus Share etc. it would be a good question. |
|
|
|