Tell me more ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.
up vote 3 down vote favorite
1

In the previous SharePoint version of SharePoint you couldn't have permissions on list views. Is this now possible on SharePoint Foundation 2010?

So for example I have a list and 2 views but I want to assign permissions to the views so that a user can see view A but not view B.

Also is it possible now to easily set permissions to items instead of having to click each item and assign permissions?

share|improve this question
Are these permissions intended to provide some kind of security or just to reduce the list of views displayed to a particular audience? – Steve P Oct 13 '10 at 18:48
DRW, can't users still access All Site Content and view your List Views? – Daniel May 22 at 0:22

4 Answers

up vote 2 down vote

You cannot set permission to views. There are new workflow actions for SharePoint Designer that could ease the per-item permission assignments via workflows. Check this blog post for some ideas, you could create some conditions to assign proper permissions.

share|improve this answer
thanks Toni but which one to use though is it the Add List Item Permissions? Just thinking how this could be useful so if i have a list that has 2 categoriies grouped by column name BOY and GIRl. But i want users who logs in as BOY permission sees all the items listed with BOYS colums. Is this possible. Hope you understand by scenario though. Thanks – Patrick Aug 2 '10 at 8:18
You can check my blog post for more some ideas. sharepointusecases.com/index.php/2010/03/… – Toni Frankola Aug 2 '10 at 9:52
Toni thanks for the reply.I don't think what i'm looking for is item level permissions and secondly i need for a list.I can say imagine creating a 2 views from a list grouping by 2 different categories.Then would like those categories assigned to different permissions.Do you get me?Permissions on view lists.. – Patrick Aug 5 '10 at 20:10
up vote 1 down vote

If you're comfortable with a little development, you could achieve this by:

  • Make both your views (I'll call them 'Boy' and 'Girl') hidden. I did this recently in CAML, but you probably could use the object model.

  • Create an application page to redirect users from this new page to the appropriate view. You can implement your own business logic here, however you want. Note that when redirecting, you'll need to make sure your GUIDs are upper case. Also, throw an exception if they don't have rights to either view.

  • Add a link to your redirection page to your navigation, so that users can be redirected.

Now, this solution isn't perfect - it prevents users from seeing the existence of the view(s) to which they lack rights, but doesn't stop the view from working if they type in the correct URL.

I guess a final step would be to add a control or some code to the pages for the Boy and Girl views to check the same business logic as the redirection, and if the user lacks rights to see that page, throws an exception. However, this does not secure the individual items against viewing - but I doubt you can achieve that without simply applying Item level permissions against items on your list.

share|improve this answer
up vote 0 down vote

Another thing you can do is create web part pages in SharePoint Designer that have Data View Web Parts on them. You can then set permissions on those pages or on the entire library where they reside.

share|improve this answer
Thanks Rob.Will look into your approach and its quite interesting.But the thing is i would have to use a doc library to set the permissions on the web part pages.Is that right? – Patrick Aug 5 '10 at 20:13
Yes. You could have one document library and set the permissions at the document level, or you could have multiple document libraries and set permissions for the entire libraries -- whichever makes the most sense in your situation. – Rob Wilson Aug 6 '10 at 0:15
This confuses people more than anything else and the actual data is not secured. – Mike Oryszak Oct 13 '10 at 23:15
Not sure what you mean by it confuses people. Can you explain? Regarding security, the idea is to remove the default views so more difficult to find. The problem is that search could still find them. The only real fool proof solution I can think of would be to do permissions at the content type level, but that is going to require custom code. It's unfortunate there is no OOB solution for this. It's a popular request. Probably the best approach is to have two different lists with unique, and a view that rolls them up when you need a union of the two. – Rob Wilson Oct 14 '10 at 3:40
up vote 0 down vote

I am not a developer, but I inserted webparts on several web pages. I then targeted the audience of each web part. If a user clicks on the link to the web page where they are not designated as part of the target audience, they do not see the web part. I was worried that someone would click on the title link to the source list that appears above the web part and accidentally get access to all data. To resolve this, I went to the source list page, used edit page to edit that web part and designate a target audience. Because users were creating data on their individual web parts (views) of the list, they needed to have editing rights based on the source list. So they have editing rights but are unable to view areas outside of the web parts where they have been included in a target audience. The tool was to collect budget data. The budget manager gets all his data in one file at the end that he can export to Excel.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.