My client has a requirement to deny access to items in a SharePoint list to a particular group of users. By default, the list is shared with "Whole Company", but if an item is marked "No Contractor" then it should be available to the whole company, except for members of the "Contractors" group.
The best solution I’ve come up with is two have two groups ("Whole Company" and "Whole Company Excluding Contractors") and have a workflow that replaces the item permissions if the item is marked “No Contractor".
The problem is I have to do this across every list - I'm not keen on having to create this workflow on every single list in SharePoint.
Is there a way to do this with permissions natively in SharePoint without the need for a workflow on every list?