Setting Up Access Rights to Company Notes on Windows 2000 Server and Windows Server 2003

This topic is intended for system administrators.

The following example explains how to implement access rights to company notes on the Windows server where you store your databases.

To Create the Folder:

1. On the server, create a folder called, for example, CompanyNotesShare.

   This folder will contain the folder for your company notes.

2. Inside the CompanyNotesShare folder, create a folder called, for example, CompanyNotesFolder.

   This folder will contain your company notes.

To Create the User Groups:

You must create two new user groups in order to control the access that users have to your company notes.

1. Create two user groups called NoteReader and NoteWriter.

2. Make the relevant users members of these two groups.

To Grant Network Access:

1. Select the folder CompanyNotesShare.

2. Share the folder as CompanyNotesShare.

3. Set the permissions for sharing as follows:

   NoteReader: Read

   NoteWriter: Change, Read

4. Remove any groups other than the ones mentioned above.

To Grant Folder and File Access for Readers:

1. Right-click the folder CompanyNotesFolder and open the Properties window.

2. Click the Security tab and add the group NoteReader.

3. Select the following access rights:

Read

List Folder Contents

Granting Folder and File Access for Writers

There are two kinds of access rights for writers:

• Liberal access rights: writers can edit and delete each other's notes.

• Strict access rights: writers can only edit and delete their own notes.

To Grant Liberal Access Rights:

1. Right-click the folder CompanyNotesFolder and open the Properties window.

2. Click the Security tab and then click Advanced and the Advanced Security Settings window opens.

3. Select the group NoteWriter, click Edit and the Permissions Entry window opens.

4. In the Apply onto field select "This folder only" and grant these access rights only:

5. Traverse Folder / Execute File

   List Folder / Read Data

   Create Files / Write Data

6. Click OK.

7. In the Advanced Security Settings window add the group NoteWriter again.

8. Click Edit and the Permissions Entry window opens.

9. In the Apply onto field select "Files only."

10. Grant these access rights only:

11. Traverse Folder / Execute File

    List Folder / Read Data

    Read Attributes

    Read Extended Attributes

    Create Files / Write Data

    Create Folders / Append Data

    Write Attributes

    Write Extended Attributes

    Delete

Read Permissions

You have now granted liberal access rights to the NoteWriter group.

To Grant Strict Access Rights:

The key to this configuration is that every writer can write to the folder, but they cannot write in the files in the folder. However, since the creator of a specific file also gets "creator owner" rights for that file, the creator can edit and delete that file by virtue of these "creator owner" rights.

1. Right-click the folder CompanyNotesFolder and open the Properties window.

2. Click the Security tab and then click Advanced and the Advanced Security Settings window opens.

3. Select the group NoteWriter, click Edit and the Permissions Entry window opens.

4. In the Apply onto field select "This folder only" and grant these access rights only:

5. Traverse Folder / Execute File

   List Folder / Read Data

   Create Files / Write Data

6. Click OK.

7. In the Advanced Security Settings window add the group NoteWriter again.

8. Click Edit and the Permissions Entry window opens.

9. In the Apply onto field select "Files only."

10. Grant the following access rights only:

11. List Folder / Read Data

    Read Attributes

    Read Extended Attributes

    Read Permissions

12. Click OK.

13. In the Advanced Security Settings window add the group CREATOR OWNER.

14. Click Edit and the Permissions Entry window opens.

15. In the Apply onto field select "Files only."

16. Grant the following access rights only:

Create Files / Write Data

Create Folders / Append Data

Write Attributes

Write Extended Attributes

Delete

You have now granted strict access rights to the NoteWriter group.

Related Topics

Company Notes

Activating Company Notes

Writing Company Notes

• Перевести на английский