I have a parent site and 5 sub sites. Any user who can read any of the sub site should be able to read the parent site. But certain users can edit the parent site and specific sub sites.Currently my permission groups looks as follow:-
- Read (UserA,UserB,UserC)
- Contribute (Admin)
Sub Site One
- Read (UserB)
- Contribute (UserA)
Sub Site Two
- Read (UserA,UserB)
- Contribute (UserC)
Currently I am managing the security as follow-
- Each of the Six site (parent site and its 5 sub sites) have unique user groups
- If new user is added I have to add him to the parent site Read group, and also to the associated sub site Read or Contribute groups.
Considering my current site hierarchy is there a better way to manage the permissions other than having unique security user groups. Baring in mind that the only rules that can always be applies in my current user requirements is that any user who can read any of the sub sites should be able to read the parent site . And no other security rules can always be true in my case.