Tag Info

New answers tagged

2

In order to manage unique permissions for a Securable Object like List or File (via associated List Item) or Folder (via associated List Item) there is a common approach that you could consider: Break role inheritance for a securable object Add/remove the role assignment on the securable object [optional] How to: set unique permissions for a File via ...


0

Rather than use folders, I create views of the document library and filter the files to display them for your various usergroups. Then, I create a SharePoint "links list" to manage access to these document library views. For example: My flat library contains files for two usergroups. I create two views: Usergroup01.aspx and Usergroup02.aspx. ...


1

Although it's not exactly your case, take a look to this link, cos I think is related with your error: http://blogs.msdn.com/b/chandru/archive/2010/10/15/sharepoint-2007-getwebcollection-webs-asmx-does-not-return-webs-based-on-a-user-permission.aspx. Regarding the link, it seems that the method GetWebCollection, actually returns all the Webs, doesn't ...


0

Should this field be editable to SPGroupA and not editable to SPGroupB? You can use javascript scom to find the SP group that the current user belongs to : http://stackoverflow.com/questions/22122139/check-if-current-users-belongs-to-sp-group-using-javascript-client-side-object-m And then make the field read-only : ...


0

Assigning permissions at the column level is not possible. My workaround: Create a calculated column (for example "Column001_copy") and give it the formula: "=[Column001]". Display this column in the list view for your user instead of the editable column.


0

My solution is dependent on Workflow. Here is solution: Create a Content Type for the Helpdesk Create a Reusable Workflow for the Content Type Add Content Type to lists you wish and make it default Since you are using Content Type so you just need to attach it to the every list you want to behave in similar way.


0

For your first point: You'd check the permissions the Anonymous Access grants. WITH ANONYMOUS ACCESS TO: 1. Entire web site ANONYMOUS USERS CAN: Browse your entire site. Read any lists, libraries, or folder within a list or library that inherits its permissions from the site, and open and read any list items or documents in those ...


1

Our company contacted Microsoft, and this is by design. For security reasons you cannot set the permissions of an app by client side code


0

You could also use New-SPOPermissionLevel To create the RoleDefinition and New-SPOGroup if you want to create a group with that RoleDefinition.


1

You can break the inheritance of the list, and set the users with a custom permission created by PowerShell with "Submit only" permissions. $spweb=Get-SPWeb -Identity "<site url>"; $spRoleDefinition = New-Object Microsoft.SharePoint.SPRoleDefinition; $spRoleDefinition.Name = "Submit only"; $spRoleDefinition.Description = "Can submit/add ...


0

I know you said views are not an option, but a fairly simple way to do it would be to create a view with a filter of [Me] on your Person or Manager field and then just take out the title URL on the list heading. Of course, they could still navigate to the list by typing in the URL manually.. but they would have to know the list name which you could hide and ...


0

In 2013 you can do it manually. To manage the item level permissions, follow these steps: Go to a Document list and create items on it. On each item, you will see a ... button next to the Name column. Click on the button and a popup menu will appear. The popup menu will also have a ... button. Click on the button to continue. Choose the Shared With option ...


0

Have you considered a SharePoint Designer Workflow? You will have to do a SharePoint Designer 2010 workflow since the 2013 version does not allow Impersonation Steps. On List Item Creation (and possibly on change), I would Add the appropriate permissions. It would look something like this:


0

A caveat to the answers provided, note that the AD group must be a security group and not a distribution list. Also I prefer to have them be email enabled security groups so they can be viewed and managed in Outlook easily by the group owner(s).


1

Make a group called Pages view group and app all users to this group. Give this group read permissions to your master page and css file in sharepoint designer


1

Have you tried adding her to the Site Owners group for the collection? That would give her Full Control rights over the site without giving her access to the site admin settings. If you haven't yet then give it a try. If she still can't see the site collections with Full Control permissions then I suggest you check which pages and lists she can and can't ...


0

You can add AD group to your site collection and assign whatever permission you want. Best practice is depend upon your number of users in AD group. Some time it is useful to adding the AD users into SharePoint groups, and some time adding user directly into the SharePoint groups. Pros of AD Group: Managed by IT May contain multiple groups (nested) ...


0

You can add AD groups to site collections with contributor permission. Concerning best practice, it comes down to how the security is controlled in your organization. Maintaining users AD group is done by the AD administrator where as maintaining users inside groups in SharePoint is maintained by the sharepoint administrator. Your choice of using AD Groups ...


1

Check permissions for a user or group for a site Open the SharePoint site on which you want to check permissions. On the Site Actions menu Site Actions menu, click Site Settings. On the Site Settings page, under Users and Permissions, click Check Effective permissions. On the Check Effective Permissions page, in the User/Group box, type the e-mail ...


0

No need to give more freedom to the app pool identity for the SP web application. SPWeb object needed to have AllowUnsafeUpdates=true in the elevated code section. This comment by ReTech resolved my issue: "Use SPUtility.ValidateFormDigest() or check if the SPWeb object has AllowUnsafeUpdates=true before updating it – ReTech 19 hours ago"


2

As it was already resolved in the comments: Could it be that these 2 mentioned users don't have access to the folder which contains the site logo? As a side note: Usually this kind of cases where site has multiple permission levels for users and some expected behavior can't be reached at some user levels, it indeed is about the permissions :)


1

I dont think you can get this, as Site owners having the Full control rights and full control can Manage Permissions - Create and change permission levels on the Web site and assign permissions to users and groups. Unless if you create another permission level but i am afraid if you remove Manage Permissions then site owners will not be able to manager ...


0

1.In the document library, hover the mouse over the folder to see the drop down menu. 2.Activate the drop down menu by pressing the down arrow 3.Choose Manage Permissions 4.Click the Actions menu and choose Edit permissions. Confirm that you want to break inheritance of permissions from the parent. 5.Edit the permissions as required. ...


3

You need to “Stop Inheriting Permissions” on that specific folder and then add peoples or groups to the same folder. Go into the specific list "List"-tab (in ribbon) -> Shared width In the "shared with" modal box -> Advanced Stop Inheriting Persmissions (ribbon) Then add person / group to the library ...


0

Check the Folder where the backup file will store and should not readonly. if yes uncheck from folder properte and try again. its working for me. Thank you, Eugine


0

You need to set item level permission dynamically based on user. So you can create a workflow for that list in which condition is like current user is equal to Author and Action is Replace Item level permission. http://spcycle.blogspot.in/2012/01/how-to-create-workflow-to-change-item.html Try, I hope it works.


0

You need to manage the permissions at List level for this and even at item level. First of all, Goto List settings > Permissions > Stop inheriting Permissions. For settings List item level permissions you can see this link in our forum. Help Link Please let me know if you have any other query.


1

If you're talking about a list, not a document library, then you can do this: Go to list settings -> advanced settings -> Read access: Specify which items users are allowed to read select: Read items that were created by the user. Same setting for "edit access". On document libraries this option is not available, I don't know why. There you could try ...


-1

Create a custom view for the list with a filter as Created by: [Me].


0

This is a powershell script which copies all the folders and its content from one list(source list) to a new list (dest list) with required permissions. Remove-PSSnapin Microsoft.SharePoint.PowerShell -erroraction SilentlyContinue Add-PSSnapin Microsoft.SharePoint.PowerShell -erroraction SilentlyContinue function ...


0

If external user having the "Contribute" then they can invite/share the stuff with other external users but that does not mean they can assign the permission to external users. Whenever the contributor sends email invitations to other invitees, as an administrator of my site, I’ll receive the access request where I can change the permission level for the ...


0

Below are couple of links i mentioned, 1st one using powershell to remove the user and groups from DL and 2nd one is using the code( you can try to create equal powershell for it) For Powershell, read this: http://sharepointthinking.wordpress.com/2012/10/01/how-to-remove-users-and-groups-from-a-sharepoint-list-using-powershell/ For code check this: ...


1

You could give each company their own site (under your top site), assuming you have Full Control over your own site. Then you can control the permissions for each site, if needed. You could also give each company its own site collection. If you do, be aware that permissions may need to be managed seperately on each site. (Permissions don't usually don't ...


1

You could possibly create Audiences for your different groups, and then configure the different webparts to only be shown to specific audiences



Top 50 recent answers are included