SharePoint Support

Determining Who Can Read What

Motivated by ST #70558, we want to know how to tell what being a group member allowed one to read. IST said:

There are a couple of different methods for figuring out what a group and what an individual may have access to viewing and/or modifying.

There are also steps that can be taken to "restrict" what a person/group may see when setting up SharePoint resources. I will address that first.

The first thing to consider is if an entirely new permission structure is required. This is what subsites are very good a providing. A subsite can have its own security groups, and these security groups can be configured so they have no access to any other part of the SharePoint site. This is typically best done when the subsite is being created and selecting the option to create unique permissions.

To check what a group has access to go to to the People and Groups page. Click on a group to show its membership Click on SETTINGS and Select the VIEW GROUP PERMISSIONS item This will open a new page that lists what parts of the site and which permissions the group has.

To check an individual's permissions the SharePoint site must be using the new SharePoint Foundation 2010 Visual Upgrade.

Sites that were migrated do not have the Visual Upgrade automatically applied. A site administrator must choose to do this from the top-level of the site visa SITE ACTIONS -> VISUAL UPGRADE

Once this is applied go to: SITE ACTIONS -> SITE PERMISSIONS

This will bring up the new version of the SITE PERMISSIONS tools which includes an option to CHECK PERMISSIONS

Enter the USERNAME in the window that pops up and you will get back a report of what that account can access and the permissions for each section it may access.

The Visual Upgrade

The above contains a hint for ST #76658: Sites that were migrated do not have the Visual Upgrade automatically applied. A site administrator must choose to do this from the top-level of the site via SITE ACTIONS -> VISUAL UPGRADE