I have denied to a specific user to write on a file. Unfortunately this user is a member of a User Group which have the privilege to write on this file. So there is a conflict between User vs. User-Group privileges. Which one will prevail here?
migrated from security.stackexchange.com Dec 7 '11 at 15:17
This question came from our site for Information security professionals.
Explicit "Deny" permissions always take precedence over all other permissions (assuming canonical ACL ordering-- but that's probably a safe assumption). The permission denying the user "Write" permission will override any permission granting the user "Write" based on group membership.