126.96.36.199 Accessing a Folder
When a client sends a request to the server to access a folder, as specified in [MS-OXCFOLD], the server MUST either allow or deny the request based on the permissions list for the folder and the user credentials that the client provided when making the request.
The server determines whether the user identified by the user credentials is included in the permissions list and then applies the folder permissions for that user as follows:
Specific user permissions: If the user is included in the permissions list, either explicitly or through membership in a group that is included in the permissions list, the server MUST apply the permissions that have been set for that user.
Default user permissions: If the user is not included in the permissions list, the server MUST apply the permissions that have been set in the default user entry of the permissions list.
Anonymous user permissions: Permissions for an anonymous user are not supported and the anonymous user entry is not used. Consequently, the server requires that the client provide user credentials.