Skip to main content

SharePoint Tutorial 6 - Security

In SharePoint all objects inherit their security settings from its parent by default. For example, when a library is created in a site the library will inherit the security settings of the site unless otherwise specified. The same would go for documents within the library.

If you modify the security of the object in any way then the security inheritence is broken but not before SharePoint imports all the parent settings to the child. Afterwards any updates made to the parent object will not be passed down to the child object.

Security in SharePoint is comprised of users, groups and roles.

Users, Groups and Roles

Users

A user account comes from the authentication system. For example, if Active Directory is used to authenticate then the user accounts will come from it.


Groups

There are two types of groups SharePoint uses: domain groups and SharePoint groups.

Domain groups can come from Active Directory much like user accounts and are created and maintained there. An Active Directory group may contain Active Directory users and other Active Directory Groups.

SharePoint groups are created and maintained in SharePoint. A SharePoint group can contain user accounts and domain groups. A SharePoint group can not contain other SharePoint groups.

Roles

Access is granted or restricted through permissions grouped to form a role. The following roles are included in SharePoint out-of-the-box:



  • Full Control - Has full control.
  • Design - Can view, add, update, delete, approve, and customize.
  •  Manage Hierarchy - Can create sites and edit pages, list items, and documents.
  • Approve - Can edit and approve pages, list items, and documents.
  • Contribute - Can view, add, update, and delete.
  • Read - Can view only.
  • Restricted Read - Can view pages and documents, but cannot view historical versions or review user rights information.
  • Limited Access - Can view specific lists, document libraries, list items, folders, or documents when given permissions.
  • View Only - Members of this group can view pages, list items, and documents. If the document has a server-side file handler available, they can only view the document using the server-side file handler.

Comments

  1. AnonymousMarch 17, 2012 at 11:15 AM

    Wow. Thanks for sharing this helpful tutorial that is totally based on security. I am a regular visitor of your blog and love to read whatever you share information about Sharepoint. Keep posting.
    sharepoint digital signature

    ReplyDelete
  2. AnonymousFebruary 19, 2013 at 7:44 PM

    This is a good tip especially to those new to the blogosphere.
    Short but very accurate info… Many thanks for sharing this one.

    A must read article!

    Also visit my blog; cash advance loan locations
    my webpage - read what they said about it

    ReplyDelete

Post a Comment

Popular posts from this blog

Tab Control in Asp.Net

Scenerio: I need your help in designing tab control in   asp.net .My requirement is I need a tab control in   asp.net (C#) like  for example goto my computer ,right click c drive and select properties.we get tabs like general,security etc....... like that i need to design one tab control(no need of any rightclick) in my web page and the database table columns should come as tabs and inseide the tab data of that particular column should come.   Example:Employee master tab1:Employee name.........his name in the tab tab2:Age.............his age tab3:Address........his address   Solution:   You can do this using a simple div <style type="text/css"> .tabs         {             position: relative;             height: 20px;             margin: 0;   ...
Post a Comment
Read more

AI and Microsoft: Revolutionizing Efficiency in Nonprofit Organizations

  How AI and Microsoft Enhance Efficiency in Nonprofit Organizations In today’s fast-paced world, nonprofit organizations face unique challenges—limited resources, increasing demands, and the constant need to do more with less. But what if technology could be the game-changer they need? In my latest research paper,  "How AI and Microsoft Enhance Efficiency in Nonprofit Organizations" , I explore how cutting-edge technologies like Artificial Intelligence (AI) and Microsoft’s innovative tools are revolutionizing the way nonprofits operate. From streamlining administrative tasks to enhancing donor engagement and optimizing resource allocation, AI and Microsoft’s solutions are empowering nonprofits to focus on what truly matters—their mission. This paper dives deep into real-world examples, practical applications, and the transformative potential of these technologies. Whether you’re a nonprofit professional, a tech enthusiast, or simply curious about the intersection of technolo...
Post a Comment
Read more

Social tagging overview in Sharepoint 2010

A tag is a word or phrase that identifies an individual piece of information according to a set of attributes or criteria. Tags make it easy to find and share information about a specific subject or task. Social tagging helps users categorize information in ways that are meaningful to them. Social tagging can improve the quality of search results by filtering against specific tags, and it can also connect individuals who want to share information with other users who have like interests. This article describes the social tagging features in Microsoft SharePoint Server 2010. This article does not describe how to configure social tagging features. It also does not discuss how to implement social tagging features as part of an overall social media strategy for an enterprise. About using social tagging features Social tagging features help users to share information and to retrieve relevant, high-quality content more efficiently. Such sharing encourages collaboration and b...
295 comments
Read more