-: Permissions, in this lesson we are going
to talk more specifically about permissions.
But not necessarily the read, write, and execute
parts, but more about the concept of inheritance.
Now when I talk about inheritance I am
not talking about your parents or your
grandparents leaving you a house or
money when they die and past away.
No, we are going to to talk about permission inheritance.
Permission inheritance is going to happen
by default whenever a new folder is created
it's going to inherit whatever the
permissions are of the folder above
it, which is called the parent.
So when we look at these parent
permissions we have to see what we have.
So in this case I have a new folder I
just created underneath the accounting directory.
Notice that I got the same permissions I had in the
last view that bob had in the accounting folder.
This is the accounting group and the administrative
group both have access to that folder.
That new folder I just created because
it automatically inherited the permissions
from the accounting folder above it.
Now the idea with inheritance is that whatever the
parent folder says the child is going to follow.
And so if the parent folder has permissions added
or removed from it, guess what's going to happen.
The child is going to have those added
or removed from it as well.
This is a default action inside
the windows operating system.
Now when it moves from the parent to
the child this is called propagation.
Propagation occurs when permissions are passed to
a sub folder from the parent through inheritance.
This can also refer to when permissions have
to propagate or pass to all the clients on
the network whenever a change is a made.
So you might hear network propagation or something
of the nature in the word of propagation.
But in terms of permissions we are talking about
it going from a parent down to a child.
Now as we look at propagation you also have
to think about do you want this to occur.
Sometimes you do and sometimes you don't.
Well if you don't want propagation to occur you
have to do what's called breaking the inheritance.
So to break inheritance you need to first click on
the advanced button in the lower right corner of
the security tab inside your folder properties.
From there another window will pop
up and you will click on the disable
inheritance button in the lower left.
Now normally you don't want to do this,
but if you need something more restricted than
its parent this is when you would do breaking
inheritance and adding additional permissions.
So that is the basic concept of
inheritance and breaking the inheritance.
Now remember when I mentioned before we
want to use groups that are assigned
to roles and not assign users directly
to a particular folder's permissions.
The reason for this is when you do assign people
directly to folder permissions this is
probably the number one thing I see that
causes privilege creep to occur.
Because people forget about those users that
was assigned to some sub folder somewhere.
If you keep people in groups it makes it
a lot easier to keep track and make sure
that privilege creep doesn't get out of hand.
Now for a second here I want to stop and
review something from the CompTIA A+.
A lot of what we have been discussing so far
is from the A+ exam in terms of permissions.
There are two key things to remember
though in case its been a while
for you since you taken the A+.
The first thing is when you copy files.
Let's pretend that I am copying
a file or folder and I am copying it
from C drive to a USB thumb drive.
What will the permissions look like on that new copy.
Well when I move the file from the
hard drive to the thumb drive, if I
copy that folder then permissions
are going to be inherited from the
folder that it gets copied into.
Whatever its new parent is.
Basically its going to lose its existing permissions.
Now if instead I moved it from the C drive
working folder to the C drive archive
folder they are both in the same hard
drive and I move it instead of copying it.
What do you think is going to happen this time?
Well if you move a folder than the permissions
are retained from its original permissions.
And so whatever that original parent was that
it inherited from it's going to take those
permissions with it to the new folder.
This is an important concept because if
you forgot fact that when copy something
you are getting new permissions, you can
actually lighten the permissions of
what it was and people can access
documents they weren't suppose to.