X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=1.7 required=5.0	tests=AWL,BAYES_00,BOTNET,KHOP_THREADED,RCVD_IN_DNSWL_NONE,RCVD_IN_HOSTKARMA_NO,RCVD_IN_HOSTKARMA_YE
X-Spam-Check-By: sourceware.org
Message-id: <4F96E27D.2040609@cygwin.com>
Date: Tue, 24 Apr 2012 13:27:25 -0400
From: "Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-to: cygwin AT cygwin DOT com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20120327 Thunderbird/11.0.1
MIME-version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: how to deny delete
References: <33732027 DOT post AT talk DOT nabble DOT com> <20120423115210 DOT GC7097 AT calimero DOT vinschen DOT de> <33738191 DOT post AT talk DOT nabble DOT com> <4F96DB60 DOT 4000207 AT cygwin DOT com> <20120424170154 DOT GS25385 AT calimero DOT vinschen DOT de>
In-reply-to: <20120424170154.GS25385@calimero.vinschen.de>
Content-type: text/plain; charset=ISO-8859-1; format=flowed
Content-transfer-encoding: 7bit
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

On 4/24/2012 1:01 PM, Corinna Vinschen wrote:
> On Apr 24 12:57, Larry Hall (Cygwin) wrote:
>> On 4/24/2012 4:24 AM, pen wrote:
>>>
>>> unfortunately, the options u pointed and what andrey pointed arent possible.
>>> In line with the locking file or directory any commands or API are
>>> available? Any tips on implementing it would be helpful.
>>
>> Windows will allow you to manage just the delete permission.  If you need
>> that level of control, check out 'icacls'.  Something like the following
>> may work for you:
>>
>>    icacls<filename>  /deny<user or SID>:D
>
> Doesn't help in Cygwin if the user is admin.  Think SE_BACKUP_PRIVILEGE.

Ah yes.  And the OP said dropping this privilege for the user was a
non-starter for some reason.  OK, I'm out of ideas.

-- 
Larry

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple