What is the expected behavior for SharePoint when a user trying to access a SharePoint online (Office 365) list item in a list with restricted read/edit access when the user that did not create the list item only has
contribute list permissions and does not have general
override list behavior or
full control for the list but does have
full control permission for the list item? I believe in SP2007 that the user was allowed to access and edit the item but that in our Office 365 SharePoint site the user is unable to access the item. Is this the expected behavior or have I made a configuration error?
The steps taken to get to this point are:
- create a new list in SharePoint Online/Office365.
- Using the list advanced settings restrict the access (both read and edit) to only the user that created the item.
- Create a general group to with
editpermissions for the list.
- Create a second group with
full controlpermissions for the list
- Have a user in the
full controlgroup add a list item
- While authenticated as user in the
full controlgroup, add
full controlitem-level permissions for that list item for User "B," who is not in the
full controlgroup for the list.
- Have User "B" attempt to edit the list item.
User "B" is unable to access the item. I think that this is a changed behavior from WSS 2007. If this is the intended behavior of these combinations of permissions and item level restrictions, we will have to re-architect our solution. But if there is something that will allow User "B" to edit an item that was created by someone else, that would be easier to implement.
One other potential twist, which I don't think is relevant, is that this site is a secondary SharePoint site in our Office 365 account.
Thank you in advance for your feedback.