Using UpdateFile, you can apply the ACL of a folder to files and folders within it. Depending on the suboperation you use, you can either replace an object’s ACL with those of the folder that contains it or add a folder’s privileges to those of an object in the folder.

For example, the ACL of the Marketing folder grants the Buyer security role visible privileges to Marketing. The ACL of a subdirectory within the Marketing folder grants the Buyer security role read and write privileges. Adding the ACLs of Marketing and the subdirectory within Marketing gives the Buyer security role visible, read, and write privileges to the subdirectory. On the other hand, if you replace the ACL of the subdirectory, the Buyer security role has only visible privileges to the subdirectory.

Whether you add or replace an ACL, you can choose to make the results of the operation recursive. Using the recursive option, you can apply the results to all files and folders in the working folder, including all files and folders in a subdirectory.

To replace the privileges of a file or folder with those of the folder that contains it, use the SetPermissions suboperation of UpdateFile, as shown in the following example. In this example, the AccessRight element for each security role or user defines the security role or user’s privileges to the working folder. Use an empty Search element to replace the ACL of all files and folders in the working folder. The omission of the Recursive element indicates that the operation affects only the immediate descendants of the working folder.

To add the ACL of a folder to that of an object in the folder, use the GrantPermissions suboperation of UpdateFile. In the following example, access rights to the working folder for two security roles and a user appear in the AccessRight element. The result of this operation is that these security roles and this user receive the same rights to files in the working folder.

Use an empty Search element to update the ACL of all files and folders in the working folder. The omission of the Recursive element indicates that this operation affects only the immediate descendants of the working folder.

To add privileges from a directory to all files and folders within it, including subfolders and their contents, set the Recursive element to True.