SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How would you structure lists/libraries taking performance and security into account.

Some of the requirements connected to security:

  • Users can only read reports they create, and edit before first approval phase.
  • Manager (from AD), can only read and approve reports from people they are managers for.
  • HR, final approval of all travel expenses forms. Read/Write all.
  • A central page you can look at all your items (history).
  • InfoPath Forms
  • Total users approx 6000.

Tbh I’m not a big fan of the idea of breaking inheritance on several thousands of items and using item level permissions in a single list. So I’m wondering what would be a good approach to structure this without a performance close to zero when it have been used for a year.

share|improve this question
up vote 1 down vote accepted

I would split up into several doclibs, perhaps even seperate sites, for example per appartment.

Item level security, especially with many different ACL combinations will tank performance fast both on view and edit operations.

Also consider splitting up per year or month (content oranizer could help automate this) to avoid getting throttled (5000 items)

For the rules consider either custom Information Policies / event receivers or workflows ro solve the logic.

For rollups I would use search either filtered on meta data, content types or path.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.