Sharepoint Read permissions but no site access?!!

Posted on 2009-04-23
Medium Priority
Last Modified: 2012-05-06
Hitting out Sharepoint site are all NT AUTHORITY\Authenticated Users. Given the default set of Read permissions, they are denied access. However, if i add to the set of permissions associated with "Read", namely the permission to Edit Items, not only can they access the entire site, they also see a "Site Actions" tab with the option to Edit Page. So...they either have too little/no access, or too much/they can add/edit pages. What's happening? Where's the middle ground?!
Question by:MMarlin7
  • 4
LVL 16

Expert Comment

ID: 24224115
Have you open Read permission level and check what rights are checked?

You can find the list through site settings -> settings -> permissions level and click on Read.

Or, perhaps you use View Only permission level?


Author Comment

ID: 24228560
NT Authority\Authenticated Users don't have View Only, they have Read.
Read is made of these permissions: In List Perms: View Items,Open Items,Veiw Versions, Create Alerts, Veiw Application Pages. In Site Perms: Apply Style sheets,User Self-Service Site Creation, View Pages, Browse User Information, Use Remote Interfaces, Use Client Integration Features,Open.
With this set of perms they get 'Access Denied' hitting the homepage. If i add the List Permission of "Edit Items", not only can they access but they can also Edit Page under Site Actions, which is way too much privilege for people we don't even know.

Author Comment

ID: 24266103
Is it relevant that the sharepoint site runs sql report integration? Why would that affect the whole site? I ask because one user in a different group, who is right to have Contribute perms, and recieved "rsAccessDenied".
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 24307289
Anyone willing to take a stab at this?

Expert Comment

ID: 24974160
Hi, MMarlin7
Have you solved this problem. I got exactly the same problem as yours.

Accepted Solution

MMarlin7 earned 0 total points
ID: 25689517
No i haven't found a solution, only to give Design perms to everyone, and now everyone can enhance, or mess up, the configuration of webparts throughout the site. Having just Read access means they can't even see it. Go figure, i'm not kidding. I will close this question.

Featured Post

Prep for the ITIL® Foundation Certification Exam

December’s Course of the Month is now available! Enroll to learn ITIL® Foundation best practices for delivering IT services effectively and efficiently.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Back in July, I blogged about how Microsoft's new server pricing model, combined with the end of the Small Business Server package, would result in significant cost increases for many small businesses (see SBS End of Life: Microsoft Punishes Small B…
A recent project that involved parsing Tableau Desktop and Server log files to extract reusable user queries for use in other systems. I chose to use PowerShell to gather the data, and SharePoint to present it...
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …
Suggested Courses
Course of the Month15 days, left to enroll

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question