locked
Problems with permission inheritance in a SharePoint Services 3.0 list RRS feed

  • Question

  • Hello everybody,

    at a customer's site, there are SharePoint Services 3.0 running. Inside of a site, there is a list which doesn't inherit permissions from the site. Also, at the root of the list, there are folders, which are also set to NOT inherit permissions from the parent folder (which is the root of the list).

    If we add a group to a folder and give it permissions, we see the same group and permissions in the root (list permissions). Also, this is propagated to other folders in the root which are still inheriting permissions. If we remove the unwanted permission from the root of the list, it disappears also from the folder which SHOULD have the new permisson.

    Why are permissions set in a folder propagated *back* to the root at all, and especially despite the fact that the list is set to not inherit permissions at all?


    Best Regards, Stefan Falk
    • Moved by Mike Walsh FIN Monday, May 23, 2011 10:08 AM admin q (From:SharePoint - General Question and Answers and Discussion (pre-SharePoint 2010))
    Monday, May 23, 2011 9:38 AM

Answers

  • Hi Stefan,

     

    Thanks for your post.

    Here is the summary issue as I understand.

    There is a document library in the site, and there is a folder in the list. you have broken the permissions inherit among them. Site->List->Folder. Now, when you give new users\groups permissions to the folder, they also have the same permission on the list, am I right?

     

    1.       When you set permissions (for example: Full Control) to the Folder after you break the permissions inherit. The users\group will have “Limited Access” permissions to the list, not the same permissions with the folder.

    More information about “Limited Access” permissions:

    http://office.microsoft.com/en-us/windows-sharepoint-services-help/permission-levels-and-permissions-HA010100149.aspx

    http://paulgalvinsoldblog.wordpress.com/2008/11/02/what-is-limited-access-anyway/

    2.       Please don’t delete the users\groups from the list permissions. The users\groups are used to record the users\groups have specify permissions on the subfolders or items in the list.

    3.       A user may be in many groups at the same time, so please check whether the user in other groups when you do this.

     

    Thanks,

    Wayne

    TechNet Subscriber Support in forum

    If you have any feedback on our support, please contact tngfb@microsoft.com

    • Marked as answer by Stefan Falk Tuesday, May 24, 2011 11:14 AM
    Tuesday, May 24, 2011 6:14 AM

All replies

  • Hi Stefan,

     

    Thanks for your post.

    Here is the summary issue as I understand.

    There is a document library in the site, and there is a folder in the list. you have broken the permissions inherit among them. Site->List->Folder. Now, when you give new users\groups permissions to the folder, they also have the same permission on the list, am I right?

     

    1.       When you set permissions (for example: Full Control) to the Folder after you break the permissions inherit. The users\group will have “Limited Access” permissions to the list, not the same permissions with the folder.

    More information about “Limited Access” permissions:

    http://office.microsoft.com/en-us/windows-sharepoint-services-help/permission-levels-and-permissions-HA010100149.aspx

    http://paulgalvinsoldblog.wordpress.com/2008/11/02/what-is-limited-access-anyway/

    2.       Please don’t delete the users\groups from the list permissions. The users\groups are used to record the users\groups have specify permissions on the subfolders or items in the list.

    3.       A user may be in many groups at the same time, so please check whether the user in other groups when you do this.

     

    Thanks,

    Wayne

    TechNet Subscriber Support in forum

    If you have any feedback on our support, please contact tngfb@microsoft.com

    • Marked as answer by Stefan Falk Tuesday, May 24, 2011 11:14 AM
    Tuesday, May 24, 2011 6:14 AM
  • Hello Wayne,

    Thank you for your helpful clarifications. Issue solved. :-)

     


    Best Regards, Stefan Falk
    Tuesday, May 24, 2011 11:15 AM