nGuidelines
to design your permission levels and to avoid common problems
(cont.):
nChange permissions on a folder level, allow changes to
affect all child elements
nUse
multiple folders and subfolders to separate files into
groups for different permissions levels
nStay away from the Deny setting unless absolutely necessary