SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a document library with thousand of items distributed on a tree of folders. Each folder has its specific permissions (groups), so there's no inheritance of permissions in this case.

I'm using Object Model and a CAML to select the items (recursively) that the current user has permissions, but it is returning items even from folders I don't have permission (even though I have permission on the item itself).

The questions are:

  1. Shouldn't the query respect the tree hierarchy regarding permissions? (If I don't have permission on the father, the permission on the leaf does not matter)

  2. Is there any way to select the items respecting it? The solution to query first to select the folders I have access, and then select only the items on those folders does not work, given the number of items we have.


share|improve this question
up vote 1 down vote accepted

Permissions are a strange beast.

  1. No. In SharePoint, if you have permissions to an item directly inside a container (ex: Library, Folder, Site) then you will automatically get permission to the container itself. The system will grant you "Limited Access" to the container.
  2. Technically, it is working as designed since you will have access to the items and the containers. You can check this link out for detecting Limited Access.
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.