see post:
http://www.rejetto.com/forum/hfs-~-http-file-server/hide-folders-without-access/msg1059339/#msg1059339
That would only work, if folder flags such as hidden/download etc were "per account" like the access/delete/upload flags. But they seem to be applied to all accounts on the folder.
1. best: set the folder as hidden, i mean, on explorer itself. By default HFS won't show it.
2. try this trick
http://www.rejetto.com/wiki/index.php?title=HFS:_The_Virtual_File_System#Tricks
3. through hfs.diff.tpl, but it's tricky, i don't advice it
Your trick #2 seems to be good (testing it on main server when next up). I didn't realise you could "overlay" it that way, to set fine-grain controls on a subfolder of a real folder. I wouldn't hide it on the server as this affects local use. Thanks!
Two enhancement ideas from this:
1) Some of the "flags" of a folder would probably work very well if reimplemented as permissions tabs (perhaps renamed to "access control" tab?), and could be set "per account". There's not really a good reason why upload can be enabled or disabled "per account" but "no download" can't. Most of these flags - hidden, browsable, archivable, don't log, etc - would work well with checkboxes per account like the other permissions, to give fine grain control. The UI exists and the functionality exists so hopefully fairly easy?
2) It would be good if file and folder masks allow some limited path specification. Right now one can have wildcard file and folder names, but you can't enter paths at all. The trick above works for one or a few folders, but not for many items, or when new folders may be created on a schedule or by users. I'd like to be able to specify a wildcard for the *path* not just the *name*.
*\LOGS*\*.* (entire contents of any subfolder at any depth, named LOGS*)
*\LOGS*\*.dmp (memory dump files within any subfolder at any depth that's named LOGS*)
\X:\PRIVATE\ (exclude this folder and all contents)