SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to restrict access to items in a library based on the users nationality. We have contracts that can be viewed by certain nationalities and not by others. I hit a problem if the user has a dual nationality.

My plan was to put each user in an appropriate SharePoint group (restircting who can members) and to add the group to the permission of the item.

Contact 1 = Nationality 1 User 1 - Nationality 1 = Would have access. User 2 - Nationality 1 + Nationality 2 = Would not have access but does.

Does anyone have any ideas if or how this is possible.

Many thanks, James

share|improve this question

Remember that you only grant permissions in SP so if you would like to have it like this (as I understand your Q)

  • User 1 = Nationality 1 - should have access
  • User 2 = Nationality 1 + Nationality 2 - should NOT have access

then if you grant permissions to the group Nationality 1 then also User 2 will be granted access (since he is a member of Nationality 1). You have to make combo groups like to make it work according to your requirements.

  • Nationality 1
  • Nationality 2
  • Nationality 1 + Nationality 2
  • etc...
share|improve this answer
Just a clarification: you cannot deny any permissions at the level of SharePoint groups, only grant. Denial is only available at the Web Application policy level. – Alexey Krasheninnikov Jul 26 '10 at 18:55

Sounds like a solid plan.

Alternatively you could define a field on each item to define what nationality the document is for and based on the value on that field restrict access using a workflow or event receiver.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.