To add to this. The warnings, which are deny permissions, do inherit down as I would suspect.
Everyone Group has "File is in wrong state." warning enabled.
Engineering Group does not
User A is a member of both the Everyone Group and the Engineering Group and is not able to change the state if the file is in the wrong state.
Usually the most restrictive settings is that are applied. In windows is the same thing. I have also same situation and I change permission for the specific user.
If this is supposed to be the case, then why does the group icon appear to the right of the permission in the user specific settings, indicating the the permission is inherited, only when the permission is ENABLED in the parent group?
And if Windows applies the most restrictive settings, how come the following is true...?
The directory "Test Directory" has the following domain groups in the directory security
"Domain Users" (this is everyone on the domain) has read and list permissions
"Engineering" has modify permissions
User A is a member of both domain groups and is able to modify the files in the directory
It's not that I don't believe you, I'm just having a hard time understanding why it is behaving the way it is. Thanks for your help.
My questions about "Test Directory" are:
is a shared folder - if is true there are also share permission;
permissions are inherited or not - if are inherited and parent object has other permission all is changed.
user A is a member only to the two groups or is member also to other groups
and the last one the user A is by the way the owner of the folder?