Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I have a user (or group) without any permission on a site. I break inheritance on a document library and give that user permission on the library. Now, if the user navigates to the document library, he also sees Quick Launch links to all other lists and can navigate to those lists. The only solution I have is to specifically remove the user from each list on the site.

Is there a way to give a user or group permission on specific document libraries only?

Also, if it is a security requirement to hide the lists and names of other document libraries, is assigning permissions at this level a recommended solution? Or, should I be handling this is another way?

share|improve this question

1 Answer 1

up vote 6 down vote accepted

This unfortunately is by design. Read this article.

"The Limited Access permission level is designed to be combined with fine-grained permissions to give users access to a specific list, document library, item, or document, without giving them access to the entire site. However, to access a list or library, for example, a user must have permission to open the parent Web site and read shared data such as the theme and navigation bars of the Web site. The Limited Access permission level cannot be customized or deleted."

So, by giving a user only access to a specific document library, you also give the user limited access to the site. This means they get to see the navigation with lists. However, they don't get to see the contents!

I'm not familiar with another way to realize this, except to stop inheriting permissions for each list and remove the user from that list.

share|improve this answer
    
I have found that as soon as the user receives Limited Access, he can not only see lists, but he can view the items in the list. This behavior is different with a document library. –  Laurie Aug 17 '11 at 21:35
    
Laurie, I've tested this in SP2010 by giving reading permissions to a document library. The user then had limited right on other lists but could not see the listitems. Please check again ;-) –  Ernst Wolthaus Aug 18 '11 at 6:46
    
Laurie, please check if the user is in another SP or AD group which has permissions on other lists. –  bojan Aug 18 '11 at 9:42
    
This is in a MOSS2007 environment using the Collaboration Portal template and an FBA user, but I wouldn't think that this would make a difference. I am almost 100% sure he is not in any other groups other than the one given the Limited Access permission, but I will check that. –  Laurie Aug 18 '11 at 22:13

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.