Share permissions and file security

Sage products use Windows share permissions and file security to control access within a network. Understand the differences between share permissions and security permissions.

Share permissions

• Share permissions apply when you share a folder over a network.
• Permissions determine the access level for users when connecting to the shared folder over the network or remotely.
• Share permissions are independent of the underlying file system.
• Right-click the folder, select Properties, and select the Sharing tab to access the share permissions.

Types of Share Permissions

• Read: Users can view and open files and folders.
• Change: Users can read, execute, modify, and delete files and folders.
• Full Control: Users have Read and Change permissions and can change permissions or take ownership of files.

Security permissions

• Security permissions or NTFS permissions apply to files and folders stored on an NTFS file system.
• These permissions control both local and remote access to the files and folders.
• Right-click the folder, select Properties, and select the Security tab to access the share permissions.

Types of Security Permissions

• Full control: Users can read, write, modify, delete files and subfolders, change permissions, and take ownership of files.
• Modify: Users can read, write, modify, and delete files and subfolders.
• Read & execute: Users can view and run executable files, including scripts.
• List Folder Contents: Users can view the names of files and subfolders.
• Read: Users can view files and subfolders.
• Write: Users can add files and subfolders.

Key differences

• Scope: Share permissions apply when accessing the folder over the network, while security permissions apply both locally and remotely.
• Management: Access share permissions on the Sharing tab and security permissions on the Security tab of the folder properties.
• Combining share and file permissions: The most restrictive permission takes precedence when you apply both share and security permissions. If you’ve Read permission and Full Control at NTFS, you’ll get Read access to the folder.

Example

Set share permissions to allow everyone access to the shared folder, but use NTFS permissions to restrict access to specific users or groups. This approach simplifies management by enforcing the most restrictive permissions.