22.214.171.124 Processing a RopModifyPermissions ROP Request
When the server receives a RopModifyPermissions ROP request buffer ([MS-OXCROPS] section 126.96.36.199) from the client, the server parses the buffer. The server responds with a RopModifyPermissions ROP response buffer. For details about how the server parses buffers and processes ROPs, see [MS-OXCROPS] section 188.8.131.52. For details about how the server formats buffers for the response, see [MS-OXCROPS] section 184.108.40.206.
The server MUST determine whether the user has permission to modify the properties of the folder by examining the FolderOwner flag of the PidTagMemberRights property (section 2.2.7). If the user does not have permission to modify the folder's properties, the server MUST return the AccessDenied (0x80070005) error code in the ReturnValue field of the ROP response buffer. If the user does have permission to modify the folder's properties, the server MUST update the permissions list for the folder according to the PermissionData structures listed in the PermissionsData field of the ROP request buffer, as specified in section 220.127.116.11.
If any PermissionData structure specifies deletion or modification of a user that is not currently in the permissions list, the server MUST ignore that PermissionData structure.