windows - Setting Writable Permission only for Administrators inside PROGRAM_DATA folder -
i've been experimenting lot of headaches implementing behavior permission in windows 7.
i have following directory structure (inside program_data):
c:\programdata\foo\
c:\programdata\foo\test1\
c:\programdata\foo\test2\
the root
folder has permission everyone. , shall because can write new files @ level of foo folder.
the test1
folder has permission everyone.
the test2
must have following rule: folders/files must writable administrators, , can read. rule shall applicable test2 folder itself.
now, everyting works well, except case:
everyone can rename test2 folder. of course, favor can renamed it, create new folder it's same name , on (an attack).
is there solution? maybe strange combination of permissions?
Comments
Post a Comment