Erfan Hardanian
All work

Kelikeh-lee

Sets who can open each folder on a shared drive. It changes nothing until a person types how many folders will change.

From kelid, Persian for key.

PowerShell 5.1Claude Code

Field
Security

Before · every door open

Corridor Finance\PayrollAll Staff, Everyone Projects\HarbourAll Staff, Everyone Legal\ContractsAll Staff, Everyone PublicEveryone A B C D Corridor Finance\PayrollAll Staff, Everyone Projects\HarbourAll Staff, Everyone Legal\ContractsAll Staff, Everyone PublicEveryone A B C D

After Keli · shaded rooms shut to all but named people· doors shut once the count is signed

Corridor Finance\PayrollM. Harlow, T. Reyes Projects\HarbourS. Oduya, I. Tan, M. Harlow Legal\ContractsL. Voss PublicEveryone A B C D Corridor Finance\PayrollM. Harlow, T. Reyes Projects\HarbourS. Oduya, I. Tan, M. Harlow Legal\ContractsL. Voss PublicEveryone A B C D

CodeDraws every door as it is and as it will be, then stops.

Door schedule
DoorRoomOpen to nowKeyed to after
AFinance\PayrollAll Staff, EveryoneM. Harlow, T. Reyes
BProjects\HarbourAll Staff, EveryoneS. Oduya, I. Tan, M. Harlow
CLegal\ContractsAll Staff, EveryoneL. Voss
DPublicEveryoneNothing to do

Administrators and SYSTEM stay on every folder.

Sign-off

3
Counted and signed

Nothing changes until someone has counted it and signed.

Type the number of folders that will change. Anything else cancels.

PersonTypes how many folders will change, and signs.

After an architect’s floor plan and door schedule, with each folder a room. Before, every door stands open; after, each is shut and keyed to the people the schedule names, once the count is signed. Names are examples.

Why I built it

On an old file server, one stolen password often opens every project folder. Keli narrows each folder to the people who work in it, and it’s built for someone who doesn’t write code: set three values and run it.

The way in 151 of 247

cyber-incident data breaches reported to Australia’s privacy regulator from July to December 2024 involved stolen, phished or guessed passwords.

OAIC, Notifiable Data Breaches Report, Jul–Dec 2024

Why now

An assistant like Copilot can find anything the person asking can open. A loose permission becomes an answer to someone’s question.

Microsoft Copilot only surfaces organizational data to which individual users have at least view permissions.
Data, Privacy, and Security for Microsoft Copilot · Microsoft Learn

How it works

CodePerson

Scripts you can read before you run them. No model.

  1. Show

    Lists who can open a folder and everything under it. Read only.

    Code

  2. Plan

    Writes what will change on each folder, in plain English, then stops.

    Code

  3. Count

    Asks for the exact number of folders that will change. Anything else cancels.

    Person

  4. Back up

    Saves each folder’s current permissions first, so any change can be undone.

    Code

  5. Apply

    Removes the broad groups and adds the named people. Admin groups can’t be removed, even by mistake.

    Code

  6. Read back

    Checks every folder afterwards, down to the deepest one.

    CodeAPPLIED AND CONFIRMEDAPPLIED — CHECK THESE

  7. Log

    One row per action. Running it twice does nothing the second time.

    Code

Built with

Runs on
Windows PowerShell, run from an administrator’s machine.
Size
About 3,800 lines of PowerShell, with a practice file share to rehearse on.
Tooling
Claude Code.

The rule it follows

Nothing changes until someone has counted it and signed.