jakibe
asked on
Sharepoint List Restrictions are not working!
I am running WSS 2003. I have set up a issues list to allow only 4 specific users. I deleted all the groups for the list that had been inherited from the parent site.
After setting up the list, I logged back into sharepoint (from the internet, not from the LAN) as a user account which was not included in one of the four I gave access to. I had full access! I checked this user to make sure they were not an administrator, and they were not. I tried it again with another user and same results.
Then, I went back to a sub-site that I knew had restricted user access and which I had tested in the past, and I was able to view all content while logged in as a user with no access to that site. I was even able to go into the permissions area as if I were an administrator.
I have done all this while logged on via the internet over the page provided by Windows Small Business Server - "View my company's internal web site". I have not tried it as an authenticated user on the lan, but will try that tomorrow.
I'm very worried that sensitive info. is now available to all. My permissions seem to be broken. Please help!!
Jakibe
After setting up the list, I logged back into sharepoint (from the internet, not from the LAN) as a user account which was not included in one of the four I gave access to. I had full access! I checked this user to make sure they were not an administrator, and they were not. I tried it again with another user and same results.
Then, I went back to a sub-site that I knew had restricted user access and which I had tested in the past, and I was able to view all content while logged in as a user with no access to that site. I was even able to go into the permissions area as if I were an administrator.
I have done all this while logged on via the internet over the page provided by Windows Small Business Server - "View my company's internal web site". I have not tried it as an authenticated user on the lan, but will try that tomorrow.
I'm very worried that sensitive info. is now available to all. My permissions seem to be broken. Please help!!
Jakibe
ASKER
bhagavan2uday,
I found the solution. The domain power users group was assigned to all domain users - under that group, sharepoint admin was assigned. I removed that from domain power users, and it solved the problem.
Thanks for trying. The credit has to go to the Lord Jesus who answered my prayer. 500 points to him!
I found the solution. The domain power users group was assigned to all domain users - under that group, sharepoint admin was assigned. I removed that from domain power users, and it solved the problem.
Thanks for trying. The credit has to go to the Lord Jesus who answered my prayer. 500 points to him!
I didn't know Jesus was a tech geek.
Where the lord has decided that all users should be power users, who are we to lend any comment
All credit goes to jesus, if not for him ?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
also refer
http://www.microsoft.com/resources/documentation/wss/2/all/adminguide/en-us/stsf03.mspx?mfr=true