Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I am working in a single farm with two distinct web applications. Each web application's content needs to be isolated from the other. Should I provision two Search Service Applications or use a single Search SA and rely on security trimming, separate content source indexing, and proper scopes?

I am already planning on unique content access accounts for crawling each web application.

share|improve this question
    
"Each web application's content needs to be isolated from the other." What do you mean with "isolated"? –  AlexPoint Mar 22 '11 at 14:08
    
Basically, I want the indexed content separate and secure. I do not want a query from site A to return results from site B, even if a poorly created scope included both content sources. –  Serious SharePoint Mar 22 '11 at 14:13

1 Answer 1

up vote 2 down vote accepted

Two search service applications make sense when you need to make sure, that "a query from site A to return results from site B, even if a poorly created scope included both content sources". You will then use search service application proxies to assign each web application their own search service application. This will give you a good level of security- however, you should be aware that security trimming might not work as aspected when users permissions change frequently and/or are extremly complex.

share|improve this answer
    
Thanks! What do you mean when you say trimming might not work as expected? Will people start seeing documents that they shouldnt? Or not see documents they should? –  Serious SharePoint Mar 22 '11 at 18:31
    
Security trimming might fail if permissions change between two crawls. Example: (1) You add permissions for DOC_LIB_1 to user JIM today. (2) You remove permissions for SECRET_LIB_1 for user JANE today. (3) You run your next crawl next sunday. In this scenario JIM won't find content from DOC_LIB_1 even though he has got permission. However, JANE will still find content from SECRET_LIB_1. Even though she is not allowed to open the documents, the title, properties and the lines of text are exposed. –  AlexPoint Mar 23 '11 at 8:02

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.