Solved

Can't stop file deletions

Posted on 2014-01-18
3
320 Views
Last Modified: 2014-01-19
I am trying to create a library where it's files cannot be deleted by anybody but the admin. For testing, I have created a new site and broke inheritance permissions from the parent.

I am the only person allowed on the site. I created a new permission set called NoDelete where I selected all permissions but deselected the delete items and files option. I created a group, added myself to it, added it to the site and assigned this permission set to it. So I still can act like an admin, but I should not be able to delete files or items from any library in this site. But I can delete, and all lists and libraries inherit permission from the site level, which has customized permissions as per above.  So why can i still delete files and items? Every other permission is enabled for this permission set, but I thought that disabling delete permissions only would work. Are there any other permissions that need to be disabled for this permission set to prevent item and/or file deletion?
0
Comment
Question by:BobHavertyComh
3 Comments
 
LVL 44

Accepted Solution

by:
Rainer Jeschor earned 350 total points
ID: 39790610
Hi Robert,
which SharePoint edition / version?
Are you sure that your account is JUST in this group or are you e.g. site collection admin?
In SharePoint you will get the combination of all permissions you have - besides an explicit deny permission set configured in the Central administration on web app level (afaicr).

Thanks.
Rainer
0
 
LVL 16

Assisted Solution

by:Walter Curtis
Walter Curtis earned 150 total points
ID: 39790952
Just a few points here - everything Rainer said is spot on, so check all of that. You mention that every other permission is on for this permission level. Make sure that the group you have granted permission to the library has only your custom permission bound to it.

Here are a few tips on testing:
Use the check permission function (found in the ribbon) to determine what the permissions are for individual users. Make sure you are checking permissions at the correct level you want.

Another thing I do always, use a second totally standard user account for testing. I have found that my admin account is never as I think so it is invalid for user testing. If you don't have a standard, "pure - virgin" account, get one and use that for your testing. Add or grant that account to the object you are working with, and test with the check permissions function and your results will be more accurate than your admin account.

Hope that helps,
0
 
LVL 9

Author Closing Comment

by:BobHavertyComh
ID: 39792072
I am site collection admin, so apparently that's the problem. I am on Office 385 SharePoint, so any test accounts have to be purchased. Thd 365 plan I'm working with is not enterprise and has no access to central admin to set web app level stuff. So test accounts need to purchased, and maybe that's an inevitable dev expense.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Note:  There are two main ways to deploy InfoPath forms:  Server-side and directly through the SharePoint site.  Deploying a server-side InfoPath form means the form is approved by the Administrator, thus allowing greater functionality in the form. …
Summary In SharePoint 2010 it is easy to create custom color themes to jazz up a site. Theme colors can also be created in PowerPoint 2010 with a few clicks. But how do the chosen colors actually look in the SharePoint site? The attached PowerPoint…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question