none
Security Trimmed Managed Metadata Terms RRS feed

  • Question

  • I know that Search will security trim results, however, my question is this:

    Will search security trim the metadata terms that it recommends while a user searches?

     

    For example, lets say that one department works on proprietary information and they want to apply proprietary terms to their documents. Naturally, any user who searches for the document will have to go through security trimming. But will any user be able to see those proprietary terms, even if searching with them produces no results?

    Thursday, February 24, 2011 2:56 PM

Answers

  • This is correct – related terms/suggestions is not part of the security framework.  You could potentially get a classified user’s terms as suggestions.

    Thanks!

    Rob Vazzana | Microsoft | Enterprise Search Group | Senior Support Engineer | http://www.microsoft.com/enterprisesearch

     

     

    • Marked as answer by Rob Creamer Tuesday, March 1, 2011 4:27 PM
    Monday, February 28, 2011 10:30 PM

All replies

  • Hi Rob,

    My understanding of your question is if FAST security trimming is after the search or during. It’s during. There is no such data present, because the security filter is part of the search terms.  The filter is always part of search, not added later.

    For post-search filtering, the scenario you are describing is possible – for example, you could see Refiner values with classified data that you don’t actually have access to documents for, but still see the navigator data for.   Does this provide the information you are looking for?

    Thanks!

    Rob Vazzana | Microsoft | Enterprise Search Group | Senior Support Engineer | http://www.microsoft.com/enterprisesearch

    • Proposed as answer by Rob Va - MSFT Friday, February 25, 2011 10:09 PM
    Friday, February 25, 2011 10:09 PM
  • There is no trimming on the oob query suggestions or related terms. I created a small demo with two documents each accessible by two different users. One document had "pepper" the other "pepsi". If the pepsi users searched enough times, then the "pepper" user would get "pepsi" as a suggestion or related query, even though he didn't have access.

    Using features which work great on the web, could be potentially disastrous in an enterprise setting. The only proper way to do this is to extend the web parts and actually execute a search in the back-end to see if the suggested terms will yield a result for the user, before displaying it.

    -m


    Search Enthusiast - MCTS SharePoint/WCF4/ASP.Net4
    http://techmikael.blogspot.com/ - http://www.comperiosearch.com/
    Saturday, February 26, 2011 11:58 AM
  • This is correct – related terms/suggestions is not part of the security framework.  You could potentially get a classified user’s terms as suggestions.

    Thanks!

    Rob Vazzana | Microsoft | Enterprise Search Group | Senior Support Engineer | http://www.microsoft.com/enterprisesearch

     

     

    • Marked as answer by Rob Creamer Tuesday, March 1, 2011 4:27 PM
    Monday, February 28, 2011 10:30 PM