I've asked this already on the SharePoint community site, but no dice.
I'm planning to use SP 2013 (in Office 365) to set up an extranet portal.
We have a set of about 10 product platforms, which some customers have, some don't. We have hundreds of customer organisations, each with usually 2-5 individual members.
What I want to do is set up permissions so that each organisation can see only content they have permission for. There are 2 possible ways to do this, as far as I see:
- Set up a user group for each product platform, and add the relevant individual customers to each platform group. Then assign the relevant group permission to new content, so only the relevant customers have access to it. Seems to be the easiest approach.
Problem: There are only two options for who can see the members of the group: everyone, or group members. I don't want ANY group members to know who else is in the group, because it's commercially-sensitive information.
- Set up a user group for each customer organisation, and when I publish new content, specify which groups have access to it.
Problem: Every time I publish something I would have to add potentially hundreds of customer permissions.
Has anyone found a solution to the group membership visibility problem in Point 1 ?
For example, a programmatic way of hiding group membership from the group members. I assume there's a chunk of code somewhere that I could edit in SharePoint Designer.
Or alternatively, does anyone have any ideas for a better structure? I could possibly do it using libraries - 1 library for each platform, set up user groups for each customer, assign the relevant groups to each library. That sort of disperses the content though, and I would like customers to see all their approved content in 1 place - I guess I could get around that with a web part..?
Any tips much appreciated.