'read' Permission To Everyone except a Group of Users

• Create a file with 'read' access to everyone, except a selected Group of Users:
  • Create a new Group, containing the list of 'forbidden' Users.
  • Make the Group-owner of the file be this Group.
  • Give 'read' permission on the file to "others", but deny this permission from the Group-owner.

Originally written by guy keren