locked
SharePoint User Permissions Issues RRS feed

  • Question

  • My company has SharePoint 2010. I have admin rights to the libraries and it seems that my permissions along with a few others frequently changes. Issues with permissions staying as they are assigned. It’s a mixture of the permissions no longer there and permissions being reduced from full to limited. We have to constantly ask the Administrator to grant us rights. He's not sure why it continuously changes (almost every week). He just recently granted me the admin login credentials so that I can login and grant myself and other access again. I've also enabled site collection audit and generated audit log reports today in the hopes that it would help me track when changes to permissions are being made and if it's system generated.

    What could be causing the problem? Is there a place that I check if there is some automation running the background that someone setup and forgot about that's changing these permissions? Any help will be greatly appreciated.

    Thank you,

    TLIVAN

    Monday, April 2, 2012 5:23 PM

Answers

  • SharePoint's auditing features will show you who changed the permissions and when, so it's good you've already turned this on.

    Out of the box, SharePoint's permissions are static. I like to compare them to file system permissions. In both cases, the permissions don't change unless someone explicitly changes them.

    So maybe some custom code has been deployed that is changing permissions? Possibly, but I think the chances for this are pretty slim. You would also be aware of whatever this solution was because one of its features would be updating permissions.

    I suspect the most likely cause is that another user is changing permissions. I say this because of what you've described -- your administrator of SharePoint doesn't sound like he's sure how to best apply and delegate permissions (no offence) and given that it sounds like it is common to give users full control over site collections my guess is someone has the right to change permissions and is doing so. I'd monitor the situation and when you permissions change again, check the audit logs (it's likely happening more frequently than you're observing, just checking the logs to see who's changing permissions will likely pinpoint the user).


    Jason Warren
    Infrastructure Specialist
    Habañero Consulting Group
    www.habaneros.com/blog

    Monday, April 2, 2012 6:50 PM

All replies

  • SharePoint's auditing features will show you who changed the permissions and when, so it's good you've already turned this on.

    Out of the box, SharePoint's permissions are static. I like to compare them to file system permissions. In both cases, the permissions don't change unless someone explicitly changes them.

    So maybe some custom code has been deployed that is changing permissions? Possibly, but I think the chances for this are pretty slim. You would also be aware of whatever this solution was because one of its features would be updating permissions.

    I suspect the most likely cause is that another user is changing permissions. I say this because of what you've described -- your administrator of SharePoint doesn't sound like he's sure how to best apply and delegate permissions (no offence) and given that it sounds like it is common to give users full control over site collections my guess is someone has the right to change permissions and is doing so. I'd monitor the situation and when you permissions change again, check the audit logs (it's likely happening more frequently than you're observing, just checking the logs to see who's changing permissions will likely pinpoint the user).


    Jason Warren
    Infrastructure Specialist
    Habañero Consulting Group
    www.habaneros.com/blog

    Monday, April 2, 2012 6:50 PM
  • Hi,

    To troubleshoot on this enable auditing for permission change. 


    Thanks, Rahul Rashu

    Monday, April 2, 2012 7:02 PM