How does FILE_DELETE_CHILD actually work?

Microsoft’s “File Security and Access Rights” documentation states that it:
“Grants the right to delete a directory and all the files it contains (its children), even if the files are read-only.”

It is also mentioned here:

Do you have to get a handle to the root directory with the FILE_DELETE_CHILD access right, and can then get handles to its children with the DELETE standard access right by performing a relative open (and it will succeed even if they are read-only)?

Or does it give unlink semantics to the directory, where it can be deleted even if it contains other files?

Or does it do something else?



Apologies, I intended to post this to NTFSD - and have now done so there.