I have created a sub-site in SharePoint that is meant to be only for Management. I created the site and stopped inheriting permissions from the parent. Then I added only the managers and myself to the Visitors and Members user groups (and I trusted a few of them to be in the Owners group with full control). So the managers are the only people that I have given permissions to the site, but for some reason all other users can still access and view the sub-site. They can't make changes or anything, but I need to prevent access to that sub-site to anyone who has not been given permissions.
Does anyone have any ideas why this might be happening? Would this be a problem with permissions at the parent site?
For reference, when I check the permissions of someone I did not give access to the sub-site I am told that they have no permissions but that the following factors also affect their level of access:
- Allow: View Web Analytics Data
- Allow: Browse Directories
- Allow: View Items
- Allow: View Pages
- Allow: Enumerate Permissions
- Allow: Open Items
- Allow: View Versions
- Allow: Browse User Information
- Allow: View Application Pages
- Allow: Use Remote Interfaces
- Allow: Use Client Integration Features
- Allow: Open
EDIT
I have managed to resolve the issue. The problem was that the person who originally created the site and set everything up gave all users full read access everywhere in Central Administration. This was overriding the broken inheritance of my sub site from the main site, and is why the permissions weren't related to a group and why I couldn't find the source of the granted permissions within the main site.
EDIT
My above edit turned out to not be the solution. Removing Full Read access from the Central Admin area only made all of my sites inaccessible, even to Admins. I am guessing that something else is wrong with the permissions somewhere else.
