Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have denied to a specific user to write on a file. Unfortunately this user is a member of a User Group which have the privilege to write on this file. So there is a conflict between User vs. User-Group privileges. Which one will prevail here?

share|improve this question

migrated from Dec 7 '11 at 15:17

This question came from our site for information security professionals.

Explicit "Deny" permissions always take precedence over all other permissions (assuming canonical ACL ordering-- but that's probably a safe assumption). The permission denying the user "Write" permission will override any permission granting the user "Write" based on group membership.

share|improve this answer
Thanks for the answer Evan! Also run a test and you are absolutely right. Question closed - All credits to Evan Anderson PS: Question moved here, so I couldnt log in with the same account. – user103450 Dec 7 '11 at 19:51

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.