Peter Forster
asked on
How do I setup a Sharepoint 3.0 (WSS) site so that subsite users don't have access to the full list of users, only the list of subsite users?
We recently migrated from Sharepoint 2.0 to Sharepoint 3.0 and in the process we have discovered that we seem to be unable to completely hide the list of users for the entire site. This is essential because we use Sharepoint to allow us to create subsites for each of our patients, and of course they aren't supposed to be able to see the list of other patients. In 2.0 this was easy, we added the subsite users via the subsite and there was no way anyone could get to the complete list. In 3.0 a whole host of things seem to lead to the full list of users, including resetting a password, clicking on a link at the top of a form for customizing personal settings, etcetera. Is there hope? We tried creating a site profile that basically offered no access to the main site, but even that didn't work.
ASKER
It didn't work the same in practice, although it might have worked the same in principle.
So in WSS 2.0 when the user was given access to a subsite they could not access the main site. In fact, the only way of getting to the complete list of users was going to Main Site administration and clicking on User statistics (which was always a strange way of getting there but had the advantage that no one without access to main site administration could get to the overall list). Now it is much easier to get to the complete list.
I am thinking that we may need to switch platforms but still hoping that someone can think of a work around.
So in WSS 2.0 when the user was given access to a subsite they could not access the main site. In fact, the only way of getting to the complete list of users was going to Main Site administration and clicking on User statistics (which was always a strange way of getting there but had the advantage that no one without access to main site administration could get to the overall list). Now it is much easier to get to the complete list.
I am thinking that we may need to switch platforms but still hoping that someone can think of a work around.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
For some reason I didn't see quihong's useful response. I am going to check into it now. Sort of fits with my theory, which is that we were taking advantage of poor GUI design. We have found an alternative solution through Microsoft paid support and I will post which one was better as soon as we complete testing.
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
You can not secure this list. I believe WSS 2.0 had the same User Information List and behavior.