Solved

SharePoint 2010 - Isolating Search Results Based On Site Collections?

Posted on 2011-03-17
8
813 Views
Last Modified: 2012-06-21
Hello again, everyone.  I don't have much experience with managing Search, although I'm trying to get it under control and set everything up correctly.  

As a test, I have set up a content source and a crawl component to crawl/index a specific file share for my team (the "web team") in my organization.  However, I wanted to limit the search results with this information to only that site collection which is being searched.

So for instance, if my portal site's search (top level) is at http://tspg.sharepoint.com/search and I search for "managing alternate access mappings", it will pull up a document titled as "managing alternate access mappings.doc" that resides in the "web team" file share at \\127.0.0.1\webteam$.

What I want to do, is to hide search results from that file share UNLESS they are searching on the http://tspg.sharepoint.com/webteam/search site.  

Does this make any sense?  I need to have all content (file shares for records being stored off-server as well as sites within the farm) to be searchable, but there is some information that I would like to keep private as it could create problems if other teams got their hands on this information.

Has anyone configured this before, or is it even possible?
0
Comment
Question by:ThatSharepointGuy
  • 4
  • 3
8 Comments
 
LVL 31

Expert Comment

by:Jamie McAllister MVP
ID: 35158529
So couldn't you configure Search Scopes pointing to each site collection and configure the local search to search that scope?
0
 

Expert Comment

by:backpackerd00d
ID: 35158539
Have you got any experience with search scopes?  If so, you'll be able to create a search scope and make this available in your search mehanism.  A scope can be applied to a site collection, or a site level, or you can apply the scope in a search centre.

I believe Foundation is able to do this
0
 
LVL 6

Author Comment

by:ThatSharepointGuy
ID: 35169309
I have very little experience with Search, other than creating the Search Service Application and setting up crawl rules for when things need to be crawled.  I've never had the "need" to do it, as my administration points were mostly focused in other areas.  However, as I grow as a SharePoint administrator, I find that I want to learn more about the product and implement it on my end...it's just hard sometimes.

Right now I'm using SharePoint 2010 Enterprise (we don't have FAST, though)  but most of the options look similar to the 2007 version.

Basically all I wanted to do was to crawl a content source (private file share for the "web team" who manages all of the web servers for the customers) so that they can search it from their site.

However, I created that content source, and now you can search from anywhere...the Enterprise Search page at the top level of the server, and even in other site collections.  

Looking at the Search Scopes that you both mentioned, I created a Scope that says that it's a Content Source, and that Content Source is the "content_WebTeam" content source, and it it set to "Include".  
Then the rule for the scope says "ContentSource = content_WebTeam".

I noticed in the site collection search settings page that it allows you to set the drop downs to include these new content sources, so that you can search within them.  However, I can still go to a DIFFERENT site collection, type something that I know exists in the file share, and it will display there.

It all boils down to security...
Public Relations folks should be the only folks about to search the Public Relations file share from SharePoint.
Legal should only be able to search the Legal file share from SharePoint.

Neither of them should be able to get results from the other's share (so, Legal will never get hits from Public Relations, and Public Relations will never get a hit from Legal's documents)...yet I also want each of them to be able to search everything else in SharePoint.

I don't know if I'm explaining this correctly, though?  I tried reading online about it but really got a bit lost with some of it (a lot of my results on Google/Bingle were more towards "including a file share" in search, etc....not what I'm trying to actually do.

Is there something that I'm just not seeing?
0
 
LVL 31

Expert Comment

by:Jamie McAllister MVP
ID: 35169338
If it boils down to security, the different departments shouldn't have access to the other site collections. If that were the case the search results would automatically be security trimmed and they wouldn't see anything they weren't allowed to.
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 6

Author Comment

by:ThatSharepointGuy
ID: 35193670
JamieMcAllister,

The departments themselves don't have access to each others site collections.  However, if (for instance) the Public Relations folks have old documents on a file share that they occasionally need to access (\\fileserv\pr_share), and would like the ability to search within that share from their site collection at https://sharepoint.com/pr, they only want the results to show up on their site collection's search.

But with the way it is now, anyone on the server can search and have those documents show up.  So I can go to https://sharepoint.com/IT and do a search in the search bar on that site, and the documents form t he \\fileserve\pr_share share will show up there...and this is what we don't want.

I went digging around the net, reading about scopes, etc...but all i saw was really just how to add file shares to search (general search across the entire farm + other content sources) but nothing specific about locking down specific content sources so that their search results were ONLY RETURNED within a SPECIFIC site collection.

Even with the security trimming, my crawl account (sp.crawl.svc) has read access to the file share in order to crawl it...and anyone doing searches in the farm can read those documents in that \\fileserve\pr_share folder when pulled up within SharePoint.

So I'm obviously doing something wrong, or missing a point somewhere...I'm just not sure where I'm getting hung up at, exactly.

Without being able to isolate search results from file shares to specific site collections, I fear that the ability to add file shares as a content source is a pointless ability, with the exception that ALL documents in said file shares were meant for ALL eyes to see.

Any help that you, or anyone else, could give would be very appreciated.  Especially if someone had the resources to do a step-by-step test to see if they, too, can get this to work correctly.

0
 
LVL 31

Accepted Solution

by:
Jamie McAllister MVP earned 500 total points
ID: 35193895
I've seen the issue before where people are able to get results on a file share that they don't have access to. So they see the items in results but get a access denied when they click on there.

If the Scope that covered the file share were created at the Site Administration Level of https://sharepoint.com/pr that may give you what you need, as it wouldn't automatically be available in the other site collections?

http://technet.microsoft.com/en-us/library/ee792872.aspx

On the topic, I don't think you'll need the following, but I include just in case:

http://blogs.technet.com/b/vedant/archive/2009/04/07/hiding-contextual-search-scopes-in-sharepoint-using-javascript.aspx
0
 
LVL 6

Author Comment

by:ThatSharepointGuy
ID: 35346766
I'm still not able to limit search results to certain content sources to just one site collection.  I've tried everything suggested here and everything that I've found via Google-Fu, but nothing has worked...it may not even be possible.  I can set a search scope on a site collection so that it shows up in the search "drop down" box, and even make it the default...but doing a search on any other site collection in the farm will always return these results even though the scope for this content source is not set on the site collection doing the searching.

My apologies for letting it get to the "abandoned" stage.  I've been out of town and haven't been able to post back.  I'm going to go ahead and request closure of the question but will assign points to JamieMcAllister for his wonderful attempts at helping me figure it out.
0
 
LVL 6

Author Closing Comment

by:ThatSharepointGuy
ID: 35916257
I've given up on this for the moment being.  I haven't been able to limit search results of file shares to specific site collections, for the organizations that own each file share (ie - PR can only see the PR file share search results.  HR has a file share as well, but PR cannot see the search results for it, and HR cannot see PR's file share search results).

Marking JamieMcAllister as answerer because he did indeed further my learning on Search and scopes, etc.  Thanks!
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Join & Write a Comment

The vision: A MegaMenu for a SharePoint portal home page The mission: Make it easy to maintain. Allow rich content and sub headers as well as standard links. Factor in frequent changes without involving developers or a lengthy Dev/Test/Prod rel…
Lync server 2013 Backup Service Error ID 4049 – After File Share Migration
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now