Identifiers & AuthLOCALRuns in your browser
Windows Permission Reference
Search a compact reference of common Windows file and directory permissions.
This tool handles input and primary processing in your browser and is designed not to send the input to QuickKit’s server.
Windows file and directory permission reference
| Permission | Applies to | Meaning |
|---|---|---|
| ReadData / ListDirectory | File / directory | Read file data, or list directory contents. |
| WriteData / AddFile | File / directory | Write file data, or create a file in a directory. |
| AppendData / AddSubdirectory | File / directory | Append data, or create a subdirectory. |
| ReadAttributes | File / directory | Read basic file or directory attributes. |
| WriteAttributes | File / directory | Write basic file or directory attributes. |
| Delete | File / directory | Delete the file or directory. |
| ReadPermissions | File / directory | Read the security descriptor's DACL and owner information. |
| ChangePermissions | File / directory | Change the DACL, subject to ownership and privileges. |
| TakeOwnership | File / directory | Take ownership, subject to the required privilege. |
| Synchronize | File / directory | Use the object for synchronization. |
| ReadAndExecute | File / directory | Read data and execute files; directory traversal/listing semantics vary by object. |
| Modify | File / directory | Common composite right: read, write, execute, and delete; exact inheritance matters. |
| FullControl | File / directory | All standard rights and commonly granted specific rights; not a guarantee against privileges or deny ACEs. |
| GenericRead | File / directory | Generic mapping to read-related standard and specific rights. |
| GenericWrite | File / directory | Generic mapping to write-related standard and specific rights. |
| GenericExecute | File / directory | Generic mapping to execute and traversal-related rights. |
| GenericAll | File / directory | Generic mapping to all mapped rights for the object type. |
Reference only: effective access requires evaluating the complete security descriptor and runtime context.
How it works
This is a terminology reference, not an access checker. Effective access also depends on ACE order, deny entries, inheritance, ownership, privileges, sharing, and the object type.