Chapter 11: Securing and Sharing Your Data
As with NTFS permissions, you can assign share permissions to both users and
groups. If you’ve granted share permissions to a group and a user is a member of that
group, the user also has those permissions. If a user is a member of multiple groups,
the user’s effective share permissions are the highest level assigned. For example, if
someone is a member of Group A, to which you’ve assigned Reader permission, and
Group B, to which you’ve assigned Owner/Co-owner permission, this person’s effec-
tive permissions are those of Owner/Co-owner.
You can override this behavior by specifically denying an access permission. Deny-
ing permission takes precedence and overrides permissions that you’ve granted to
groups. If you don’t want a user or a group to have a permission, configure the share
permissions so that the user or the group is denied that permission. For example, if
you don’t want the user to have Owner/Co-owner permission, deny this permission
to the user’s account.
Figure 11-15. Configuring media sharing
Table 11-3. Share permissions
Permission How it’s used
Owner/Co-owner Grants full access to the shared file or folder. People with this permission can read files,
change files, change file and folder permissions, and take ownership of files and folders.
Contributor Grants permission to read files, create files and subfolders, modify files, change attributes on
files and subfolders, and delete files and subfolders.
Reader Grants permission to view file and subfolder names, read files and file attributes, access the
subfolders of the share, and run program files.