Here is my scenario:
I have three groups, top-level Site Owners and sub-level groups Site Visitors and Site Testers. I have a single master list of resources with a variety of items stored in it. What I want to do is create a Data View Web Part for each sub-group, i.e. Site Visitors and Site Testers, such that each group can only view specific data; the data they are allowed to see is based on the content of a specific column, for example Site Testers DVWP will only show the data rows from the master list that contain keyword(s) in the reference column.
The requirement is to create a metadata style permissions scheme similar to Titus Metadata Security. My questions is, if a specific user is a part of more than one subgroup, i.e. user1 is a member of Site Visitors and Site Testers, can SharePoint merge the DVWPs for each of these subgroups such that user1 can see the content for each of these subgroups?
I agree Christophe, it will be tricky. In the master test list I created a column called "Permission", along with 4 row items for testing. For each row item I specify the name of the group that can see it under the Permission column, i.e. "Testers", "Visitors", etc. What I'm doing now is creating the DVWPs in SharePoint Designer 2007, I'm leaving the Permission column out so it's not visible to the users of that specific subgroup. I will upload the DVWPs to my site and assign permissions to each accordingly; so Site Testers see the Testers DVWP, Site Visitors see the Visitors DVWP, etc. Any user who is a member of both subgroups should see the content visible in both the Testers and Visitors DVWPs.
I was able to setup a DVWP for both Site Testers and Visitors. Users are able to see the items they have access to and are denied access to the source master list as expected. My only remaining issue is that I want users of a specific sub-group to be able to add items to the source master list from the DVWP, so the master list gets updated with items they add, the list form for that specific sub-group will have the Permission column hard-coded for that subgroup so that specific list item is preset so only users of that specific subgroup, and the Site Owners gropu, can view it.