Summary

The assigned rights on a document or folder cannot be overwritten by any matching rights inherited from a parent folder. This allows you to set an exact set of rights for a document or folder without having to take inheritance into account.

More Information

The following folder structure will be used to illustrate this point.

Joe's Folder
L	Joe's Document

1. On Joe's Folder, add the user JOE with the This folder, subfolders and documents scope and grant Browse, Read and Rename, while denying Delete. This allows JOE to read and rename Joe's Document, but prevents him from deleting the document.
2. On Joe's Document, add the user JOE with the This entry only scope and grant Delete while denying Rename. Do not specifically grant or deny the Browse and Read rights. JOE now has Delete rights on Joe's Document, but is denied Rename. By specifically granting Delete and denying Rename on Joe's Folder, you have masked the inheritance of Delete and Rename from Joe's Folder. Since you did not specifically allow or deny Browse or Read, JOE will inherit Browse and Read on Joe's Document.