TeamSite MOVE operation and permissions, security

tjnguyen

This is probably more of a question than an issue.
TeamSite 6.7.2 SP2
Solaris 10

Scenario:
Group A is Author role at the branch level.
Permissions have been set at the folder level (e.g. iwaccess set-unix-permission CLT), Group A has RW in folder A, but RO in folder B.
NOTE: eventhough TeamSite permissions are set to rwxr-xr-x, Unix permissions are still for that directory.
drwxrwxrwx 5 iwvadmin iwglobal 512 Aug 18 17:44 folder A

Question:
We are seeing that Group A can move files from folder A to folder B even though they only have read only in folder B. Another scenario that is I can move files into directories that are "no access". I'm assuming this is expected behavior but wanted to validate, or if there are any other ways to prevent people from moving files to RO directories?

One thought is create a custom role and remove the 'move' op but that has other implications from a functional perspective for us.