Granting Access Control

You can control access to public folders by using the directory entries represented as mailboxes in the Address Book. Public folder owners can grant access permissions to any mailboxes represented by objects of the Distribution-List, Mailbox, and Public-Folder classes.

The following access permissions can be maintained for public folders:

Create items

You can create items in the folder.

Read items

You can read any items in the folder. Read Items permission is required for a user to open the folder's contents table.

Create subfolder

You can create subfolders in the folder.

Note that users with Create Subfolder permission have Owner permission for the subfolders they create. They can prevent any users from accessing those subfolders, including the owner(s) of the parent folder.

Edit items You have one of the following permissions:

Option	Description

None	You cannot edit items in the folder.
Own	You can edit only items that you created.
All	You can edit any item in the folder.

Delete items — You have one of the following permissions:

Option	Description

None	You cannot delete items in the folder.
Own	You can delete only items that you created.
All	You can delete any item in the folder.

Folder owner — You are the owner of the folder. Folder owners are granted all other permissions. Note that the name of the last owner is never removed from the folder's access control list.

Folder contact — You will receive replication conflict notifications, folder design conflict notifications, and quota notifications.

When you grant permissions to an Address Book entry of the DistributionList class, all the sublists of that distribution list are granted the same permissions. Distribution list members that are not represented by an X.500 Distinguished Name (that is, one-off addresses placed on distribution lists as X.400 originator/recipient addresses) are not granted permissions.

A public subfolder inherits the access control list of its parent unless the subfolder owner creates access controls specifically for the subfolder. If a folder has subfolders and you change the permissions for the parent folder, the permissions of the subfolders are not changed automatically. The changed permissions apply only to newly created subfolders.

Access cannot be granted on a per-message basis. That is, you cannot specify different levels of permissions for messages within the same public folder.