Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have denied to a specific user to write on a file. Unfortunately this user is a member of a User Group which have the privilege to write on this file. So there is a conflict between User vs. User-Group privileges. Which one will prevail here?

share|improve this question

migrated from security.stackexchange.com Dec 7 '11 at 15:17

This question came from our site for Information security professionals.

1 Answer 1

Explicit "Deny" permissions always take precedence over all other permissions (assuming canonical ACL ordering-- but that's probably a safe assumption). The permission denying the user "Write" permission will override any permission granting the user "Write" based on group membership.

share|improve this answer
    
Thanks for the answer Evan! Also run a test and you are absolutely right. Question closed - All credits to Evan Anderson PS: Question moved here, so I couldnt log in with the same account. –  user103450 Dec 7 '11 at 19:51

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.