126.96.36.199 Processing a RopModifyPermissions ROP Request
When the server receives a RopModifyPermissionsROP request buffer ([MS-OXCROPS] section 188.8.131.52) from the client, the server parses the buffer. The server responds with a RopModifyPermissionsROP response buffer. For details about how the server parses buffers and processes ROPs, see [MS-OXCROPS] section 184.108.40.206. For details about how the server formats buffers for the response, see [MS-OXCROPS] section 220.127.116.11.
The server MUST determine whether the user has permission to modify the properties of the folder by examining the FolderOwner flag of the PidTagMemberRights property (section 2.2.7). If the user does not have permission to modify the folder's properties, the server MUST return the AccessDenied (0x80070005) error code in the ReturnValue field of the ROP response buffer. If the user does have permission to modify the folder's properties, the server MUST update the permissions list for the folder according to the PermissionData structures listed in the PermissionsData field of the ROP request buffer, as specified in section 18.104.22.168.
If any PermissionData structure specifies deletion or modification of a user that is not currently in the permissions list, the server MUST ignore that PermissionData structure.