Can I do security trimming on search results from SharePoint 2010 against WSS 2.0

Question

I have indexed an old WSS 2.0 from my SP2010 search engine. The indexation works fine as I can see documents from the WSS 2.0 server in the results. The problem is that there doesn't seem to be any security trimming done on these results. I can see documents coming from paths I don't have access to. When I click on these documents from the results I have an expected "access denied".

I was expecting that these results don't appear at all in the results list. Is there something I'm missing ? Do I need to implement custom security trimming ?

I have read this forum and it looks like security trimming works out-of-the-box from WSS 2.0 to WSS 3.0. Maybe it doesn't work from WSS 2.0 to SP2010 ?

I tried indexing a shared folder on the network and the security trimming is correctly applied.

Answer 1

The SharePoint 2010 search index, while crawling, collects and stores the information about access control list (ACL) defined for the files or documents. While searching, this information is being used by the search service to security trim the results and so the search results are displayed according to user permissions.

Since WSS 2.0 does not support item or folder level permissions, ACLs are not found at crawl time. And so, you cannot have out-of-box security trimming.

The solution is to build custom security trimmer implementing ISecurityTrimmer2 interface.

By the way, I already built trimmers for such cases and I wrote a blog post here which focuses on building custom security trimmers when the content to be crawled is an external site.... like WSS 2.0.