«

Hello,

I am studying for my 70-290 exam using the MSPress Traning Book by Holme and
Thomas 2nd edition. (If you happen to have this book my question relates to
page 6-25).

I am stuck with the following question and was wondering if anybody could
give me some help:

Problem) When a user does not have both the "Write Attributes" and "Write
Extended Attributes" permissions for a file they can not edit the contents of
that file.

Question) Why is this? It would seem to me that if they have the "Create
Files / Write Data" permission and/or the "Create Folders / Append Data"
permission they should be allowed to edit or append to the file. I've set
this up on a Virtual Machine and sure enough this is how it behaves but I
just don't understand it. Seems contrary to the description of the attributes
permissions that I've read on the net.

Any explanation of this NTFS behaviour would be appreciated. I just can't
understand why this would prevent editing a file and would like to undertand
it before I write the exam.

Thanks!

Grant


--
Grant Anderson

> Hello,
>
> I am studying for my 70-290 exam using the MSPress Traning Book by Holme
> and
> Thomas 2nd edition. (If you happen to have this book my question relates
> to
> page 6-25).
>
> I am stuck with the following question and was wondering if anybody could
> give me some help:
>
> Problem) When a user does not have both the "Write Attributes" and "Write
> Extended Attributes" permissions for a file they can not edit the contents
> of
> that file.
>
> Question) Why is this? It would seem to me that if they have the "Create
> Files / Write Data" permission and/or the "Create Folders / Append Data"
> permission they should be allowed to edit or append to the file. I've set
> this up on a Virtual Machine and sure enough this is how it behaves but I
> just don't understand it. Seems contrary to the description of the
> attributes
> permissions that I've read on the net.
>
> Any explanation of this NTFS behaviour would be appreciated. I just can't
> understand why this would prevent editing a file and would like to
> undertand
> it before I write the exam.
>
> Thanks!
>
> Grant
>
>
> --
I don't know if i understood your question. if you create a file you are the
creator owner, and you have full control, you create a file, you give the
permission for other users, in this case, all what written on the book is
right.
Extended attributes are just little things, not very important but useful
sometimes.
I don't know if i've answered your question.
Toso

Hi Toso,

I agree that attributes should just be little things that don't prevent a
user from editing a file. But my testing shows (and the book agrees) that if
a user does not have both "Write Attributes" and "Write Extended Attributes"
they are unable to edit a file. My question is why is this the case? It would
seem to me that Windows should allow a user to edit a file regardless of
whether that user has permission to write attributes. What am I not getting?
Thanks!!

Grant
----

"Toso Contoso" wrote:

>
>
> > Hello,
> >
> > I am studying for my 70-290 exam using the MSPress Traning Book by Holme
> > and
> > Thomas 2nd edition. (If you happen to have this book my question relates
> > to
> > page 6-25).
> >
> > I am stuck with the following question and was wondering if anybody could
> > give me some help:
> >
> > Problem) When a user does not have both the "Write Attributes" and "Write
> > Extended Attributes" permissions for a file they can not edit the contents
> > of
> > that file.
> >
> > Question) Why is this? It would seem to me that if they have the "Create
> > Files / Write Data" permission and/or the "Create Folders / Append Data"
> > permission they should be allowed to edit or append to the file. I've set
> > this up on a Virtual Machine and sure enough this is how it behaves but I
> > just don't understand it. Seems contrary to the description of the
> > attributes
> > permissions that I've read on the net.
> >
> > Any explanation of this NTFS behaviour would be appreciated. I just can't
> > understand why this would prevent editing a file and would like to
> > undertand
> > it before I write the exam.
> >
> > Thanks!
> >
> > Grant
> >
> >
> > --
> I don't know if i understood your question. if you create a file you are the
> creator owner, and you have full control, you create a file, you give the
> permission for other users, in this case, all what written on the book is
> right.
> Extended attributes are just little things, not very important but useful
> sometimes.
> I don't know if i've answered your question.
> Toso
>
>
>

I posted your question in microsoft.public.windows.server.security.
I don't know the reason, but i'll be lookung for the explanation.
toso

I think it's because one permission is for dos attributes, an the other is
for GUI attributes.
Probabli this 2 kinds of attributes are not the same, an if you don't have
both, you can't modify the files.
or better the attributes, and you mast have both to modify the file.
I'm just guessing but i don't know the truth.
Toso