Consider following share rights:
Security \\dev\profiles\ rw – Administrators Security \\dev\profiles\bambus02 inherited AND rw – bambus02 Sharing \\dev\profiles rw – Everyone
as "bambus02", my access to
\\dev\profiles is denied, but access to
\\dev\profiles\bambus02 is allowed with full rights - this is really wished behaviour, but the question is:
Why I am allowed to access a subfolder of a share, when on the path the higher folder (profiles) has access denied?
Is it not the way how the ACL checks works, checking all path segments from upper to lower and stopping when any of them is not allowed?