|
I want to be able to give user John Doe full permissions to a site, but I want to give the same user read-only permissions (or perhaps none at all) to a specific document library that resides within that site. Is this possible? If so, how do I go about setting this up? |
|||
|
|
|
After a bit of comment discussion, I think we've nailed it down. Permissions trickle down in Sharepoint. You have web application permissions in Central Administration (Application Management -> Policy for web application) to deal with that grant permissions to users globally for the web application. The next set of permissions down would be site collection owner/site collection administrator. If a user is a SCO/SCA, they'll have access to everything in the site collection whether or not they've been granted permissions. Then you have site permissions, either by a Sharepoint group or explicitly added. If you remove John Doe from the web application policy and he is not listed as a SCO/SCA, he will not have access to the document library if his Sharepoint group has been removed from the access list. |
|||
|
|
|
Go to the settings on the document library and you should see a link for Permissions. You can set his permissions there. You can also set it at the document level if you really want to go that far, but that would not be recommended as it gets hard to maintain security when you have permissions that granular. Granting/denying permissions to individual users is not really a best practice. You should create a group called something like "restricted readers" and then set permissions for that group in the list. This allows you to easily add/remove others who may also have this same restriction down the road without having to figure out all of the places where you have set permissions. |
|||||||||||
|
