CruiseControl.NET NTFS security of published packages are different then the parent folder.

Question

I've setup CCNet to build under user CCBuild, which publishes the builds to C:\Build\Projects\ProjectName\Version\Package.zip

I've allowed several AD domain users to access the folders from C:\Build\Projects\ProjectName

But they can't download the packages because the security gets set differently. While they can acccess the ProjectName-packages.xml they can't access the ZIP packages in the same folder.

Am I missing some configuration? I have no idea why CCNet should publish using different security settings.