Occasional Visitor
Advice on restricting modify access on a documents, but not folders

Currently using TRIM


There is a desire to explore the option of user being able to set the access on a folder and NOT a document.


This can be done a number of ways, however the requirements are:


1. A document needs to inherit access from the folder.

2. A document must be able to be moved between folders, amending the access.

3. A user must not be able to explicitly apply access on a document, avoiding the situation where a user can set the document to be everyone regardless of the folder access.


Is this possible and if so what would be the configuration required?