How do I setup a Sharepoint 3.0 (WSS) site so that subsite users don't have access to the full list of users, only the list of subsite users?

We recently migrated from Sharepoint 2.0 to Sharepoint 3.0 and in the process we have discovered that we seem to be unable to completely hide the list of users for the entire site. This is essential because we use Sharepoint to allow us to create subsites for each of our patients, and of course they aren't supposed to be able to see the list of other patients. In 2.0 this was easy, we added the subsite users via the subsite and there was no way anyone could get to the complete list. In 3.0 a whole host of things seem to lead to the full list of users, including resetting a password, clicking on a link at the top of a form for customizing personal settings, etcetera. Is there hope? We tried creating a site profile that basically offered no access to the main site, but even that didn't work.
Peter ForsterWebsite DevelopmentAsked:
Who is Participating?
 
quihongConnect With a Mentor Commented:
Its been awhile since we migrated off of 2003, but I think you're right that its "easier" to get to the complete list in 2007, but I am pretty sure it was possible to get to the list in 2003 if you knew how (i.e, adding a user lookup column to a list that points to the User Information List).

How about promoting all the subsite to its own top level site collection? Doesn't sound like a bad idea especially if you have strict security requirements.

Tutorial on how to promote the subsite to top level site collection - http://coppockscoolness.blogspot.com/2008/05/sharepoint-subsite-move-up-1-level.html
0
 
quihongCommented:
The User Information List is a built in list that is unique to every site collection. It holds the name of every user that access the site AND every user that is granted access to the site collection.

You can not secure this list. I believe WSS 2.0 had the same User Information List and behavior.
0
 
Peter ForsterWebsite DevelopmentAuthor Commented:
It didn't work the same in practice, although it might have worked the same in principle.

So in WSS 2.0 when the user was given access to a subsite they could not access the main site. In fact, the only way of getting to the complete list of users was going to Main Site administration and clicking on User statistics (which was always a strange way of getting there but had the advantage that no one without access to main site administration could get to the overall list). Now it is much easier to get to the complete list.

I am thinking that we may need to switch platforms but still hoping that someone can think of a work around.
0
 
Peter ForsterWebsite DevelopmentAuthor Commented:
For some reason I didn't see quihong's useful response. I am going to check into it now. Sort of fits with my theory, which is that we were taking advantage of poor GUI design. We have found an alternative solution through Microsoft paid support and I will post which one was better as soon as we complete testing.
0
 
GreatGermCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.