We have an on-premises version of TFS 2018. We have set up a user to have access to the collection under the "Version Control" tab with the following permissions.
I have then drilled down into the projects under the collection and set some of the files (web.config), to be Read = Deny.
I would have presumed that this setting didn't allow the user to see the contents of the file when opened in Visual Studio. Is this the case or have I misunderstood the setting? If so how can I restrict access to certain files in TFS.