File Access Rights for the NWDI Transport Directory 
When you configure the domain in Change Management Service (CMS), CMS creates several standard directories automatically. These directories are located under the path of the transport directory.
These directories automatically have the same access rights as the transport directory itself. To protect these directories from unauthorized access, you must use operating system methods to enter the file access rights.
You must edit the following directories:
archives
The archives directory must be accessible to users with the following authorizations:
Users with the authorization CMS.administrate.
Administrator users of the AS Java.
extract
The extract directory must be accessible to users with the following authorizations:
Users with the authorization CMS.administrate.
Administrator users of the AS Java.
inbox
The inbox directory must be accessible to users with the following authorizations:
Users with the authorization CMS.administrate.
Administrator users of the AS Java.
All users with the authorization CMS.transport.
log
The log directory must be accessible to users with the following authorizations:
Users with the authorization CMS.administrate.
Administrator users of the AS Java.
Note
All subdirectories must take their authorizations from the nodes immediately above them.