Fine grained permissions and Export to Spreadsheet RRS feed

  • Question

  • 1. Create custom list
    2. Create two items, item1 and item2, that everyone can see (in, say, the visitors group)
    3. On item2, break inheritance and remove all permissions
    4. Log in as a User1
    5. User1 can see item1 but not item2 (as expected)
    6. From the Actions menu, Export to Spreadsheet
    7. Open spreadsheet, and you see both item1 and item2

    Surely this must be a bug?  I don't see mention of it anywhere in my googlings.  A user shouldn't be able to export items he doesn't have permission to see?

    Thursday, July 28, 2011 3:37 PM