I have a site with locked down permissions to only a select few and I have one list that has read permissions to All Authenticated users (lets call them visitors) and it works great. The visitors can "Set Alerts on this list" however get access denied when they try to remove themselves from the alert by selecting "Manage My Alerts"
When I assign read permissions to All authenticated users to the site (and not the list) the vistors can manage their own alerts just fine but they have read access to the entire site.
I imagine that it has something to do with the users access another part of the site, outside of the list, thus they get a denied access however I do have all auth users set to Limited Access at the root of the site.
any suggestions?
