We have a group of contractors that need to have limited access to source control under TFS. I added the contractors to an Active Directory group and explicitly denied all permissions to Source Control for that group on the root folder $/ and can see that the permissions are being inherited by the project folders, but when logged in as one of the contractors the folder/file structure of source control is still visible.
The contractor accounts can't actually download files from source control, but I need to completely hide the folder structure as well. I've verified with Attrice TFS sidekicks that the effective permissions for one of the contractors is as desired but no luck. What would cause the folder structure to be viewable when the Read permission is explicitly denied for a user?