I found this in a few different places around the 'net - hopefully it's helpful:
Set, View, Change, or Remove Special Permissions for Files and Folders in Windows XP
In Windows XP, you can apply special access permissions to files or folders that are located on NTFS file system volumes. Special access permissions are customizable sets of permissions. This article describes how to set, view, change, or remove special permissions for files and folders.
Permissions for Files and Folders
Folder permissions include Full Control, Modify, Read & Execute, List Folder Contents, Read, and Write. Each of these permissions consist of a logical group of special permissions that are listed and defined in the following sections.
Note: This article assumes that you are using Windows XP on a domain. By default, simplified sharing is enabled in Windows XP if you are not connected to a domain, which means that the Security tab and advanced options for permissions are not available.
If you are not joined to a domain and want to view the Security tab, view the Set, View, Change, or Remove Special Permissions for Files and Folders section in this article.
File and Folder Special Permissions
The following table describes file and folder special permissions.
Special Permissions
Full Control
Modify
Read & Execute
List Folder Contents
Read
Write
Traverse Folder/Execute File
yes
yes
yes
yes
no
no
List Folder/Read Data
yes
yes
yes
yes
yes
no
Read Attributes
yes
yes
yes
yes
yes
no
Read Extended Attributes
yes
yes
yes
yes
yes
no
Create Files/Write Data
yes
yes
no
no
no
yes
Create Folders/Append Data
yes
yes
no
no
no
yes
Write Attributes
yes
yes
no
no
no
yes
Write Extended Attributes
yes
yes
no
no
no
yes
Delete Subfolders and Files
yes
no
no
no
no
no
Delete
yes
yes
no
no
no
no
Read Permissions
yes
yes
yes
yes
yes
yes
Change Permissions
yes
no
no
no
no
no
Take Ownership
yes
no
no
no
no
no
Synchronize
yes
yes
yes
yes
yes
yes
IMPORTANT: Groups or users who are granted Full Control on a folder can delete any files in that folder, regardless of the permissions that protect the file.
Note: Although List Folder Contents and Read & Execute appear to have the same special permissions, these permissions are inherited differently. List Folder Contents is inherited by folders but not files, and it only appears when you view folder permissions. Read & Execute is inherited by both files and folders and is always present when you view file or folder permissions.
Note: In Windows XP Professional, the Everyone group does not include the Anonymous Logon group.
Special Permissions Defined
You can set any or all of the following special permissions on files and folders.
Traverse Folder/Execute File
For folders:
- The Traverse Folder permission allows or denies the user from moving through folders to reach other files or folders, even if the user has no permissions for the traversed folders (applies only to folders). Traverse Folder takes effect only when the group or user is not granted the Bypass Traverse Checking user right which checks user rights in the Group Policy snap-in. By default, the Everyone group is given the Bypass Traverse Checking user right.
For files:
- The Execute File permission allows or denies program files the are running (applies only to files).
Setting the Traverse Folder permission on a folder does not automatically set the Execute File permission on all files in that folder.
List Folder/Read Data
The List Folder permission allows or denies the user from viewing file names and subfolder names in the folder. The List Folder permission affects only the contents of that folder and does not affect whether the folder that you are setting the permission on is listed. This applies only to folders.
The Read Data permission allows or denies viewing data in files (applies only to files).
Read Attributes
The Read Attributes permission allows or denies the user from viewing the attributes of a file or folder, such as read-only and hidden. Attributes are defined by the NTFS file system.
Read Extended Attributes
The Read Extended Attributes permission allows or denies the user from viewing the extended attributes of a file or folder. Extended attributes are defined by programs and may vary by program.
Create Files/Write Data
The Create Files permission allows or denies the user from creating files in the folder (applies only to folders). The Write Data permission allows or denies the user from making changes to the file and overwriting existing content (applies only to files).
Create Folders/Append Data
The Create Folders permission allows or denies the user from creating folders in the folder (applies only to folders). The Append Data permission allows or denies the user from making changes to the end of the file but not changing, deleting, or overwriting existing data (applies only to files).
Write Attributes
The Write Attributes permission allows or denies the user from changing the attributes of a file or folder, such as read-only or hidden. Attributes are defined by the NTFS file system.
The Write Attributes permission does not imply creating or deleting files or folders, it includes only the permission to make changes to the attributes of a file or folder. To allow or deny create or delete operations, see Create Files/Write Data, Create Folders/Append Data, Delete Subfolders and Files, and Delete.
Write Extended Attributes
The Write Extended Attributes permission allows or denies the user from changing the extended attributes of a file or folder. Extended attributes are defined by programs and may vary by program.
The Write Extended Attributes permission does not imply that the user can create or delete files or folders, it includes only the permission to make changes to the attributes of a file or folder. To allow or deny create or delete operations, view the Create Files/Write Data, Create Folders/Append Data, Delete Subfolders and Files, and Delete sections in this article.
Delete Subfolders and Files
The Delete Subfolders and Files permission allows or denies the user from deleting subfolders and files, even if the Delete permission is not granted on the subfolder or file. This permission applies only to folders.
Delete
The Delete permission allows or denies the user from deleting the file or folder. If you do not have Delete permission on a file or folder, you can delete it if you are granted Delete Subfolders and Files permissions on the parent folder.
Read Permissions
The Read Permissions permission allows or denies the user form reading permissions about the file or folder, such as Full Control, Read, and Write.
Change Permissions
The Change Permissions permission allows or denies the user from changing permissions on the file or folder, such as Full Control, Read, and Write.
Take Ownership
The Take Ownership permission allows or denies the user form taking ownership of the file or folder. The owner of a file or folder can change permissions on it, regardless of any existing permissions that protect the file or folder.
Synchronize
The Synchronize permission allows or denies different threads to wait on the handle for the file or folder and synchronize with another thread that may signal it. This permission applies only to multiple-threaded, multiple-process programs.
