Just like other sysobjects, folders (including cabinets) are also assigned ACLs. The ACL on a folder is used for three purposes:
Typical access control on folder objects relates to viewing and modifying their metadata and their deletion.
Folder security restricts operations on objects linked to a folder based on the ACL on the folder object. When folder security is enabled, object security is necessary, but not sufficient for adding objects to or removing them from a folder. The following table ...