Folder access rights

Folders have the following security characteristics:

• Each folder is independently secured by its own ACL.
• Folders pass security to their directly contained subfolders, if the subfolder has set its Inherit parent permissionsproperty to True, and if the parent folder has inheritable permissions.
• A folder can become the security parent of the documents and custom objects it contains, if both the folder and the contained objects have been properly configured.
• Folders contain several permissions marked (Inherit only) that will be inherited by the documents contained in that folder if there is a properly configured security parent relationship between the folder and the documents it contains.
• A folder can be associated with a security policy, but can only use Application security templates, which require custom programming to apply the template to the folder.

Folder access rights

Table of folder access rights

Full Control	Modify Properties	Add to Folder	View Properties
Includes all access rights and permits all operations including: Modify security Change owner Delete the folder	Create subfolders; modify folder properties	Add documents and custom objects to the folder	View the folder properties and security; open the folder

Default security

The new folder acquires its initial security, with source type of Default, from the Default Instance Security page of its class. By default, the user who creates the folder gets Full Control.

Modifying the security of a particular folder class has no effect on the security of existing folders that are instances of that class. By contrast, modifying a folder's security can affect subfolders. Specifically, a child subfolder inherits only access rights from the parent folder if its Inherit parent permissions property is set to True and the parent has permissions that are set to be inheritable.