Users able to see documents via URL when they cannot see the folder containing them?

I took an AD group out of the permissions list for a folder in a document library. Then I ran an incremental search.
Now, users in that group cannot see the folder (correct behavior!).
Users in that group do not find documents in that folder when performing a site search (correct behavior!).
BUT, users in that group CAN open a document in that folder by using the full URL to a document there, the full link.
This seems like a security violation - how can the members of that removed group open a document in a library that they cannot even see?
SP2010 Enterprise, SP1, Feb 2014 CU on Windows Server 2008 R2
Win7 clients with IE10
I have reviewed the groups in use and the permissions lists where they are used and don't see any source of "leakage".
Any ideas why this might be happening and how to fix it?

Hi,
Based on your description, my understanding is that the user without permission can see a document in a folder by using the full URL to a document.
I have followed your description to do a test, but I can’t reproduce your problem.
My 
suggestion is that:
Sign in your site with a user who has full control 
permission to the site, and go to  the documents in the folder and check whether the users in that group without permission to the folder have permissions to the documents.
When users in that group use the full URL to a document , please check whether the current user is the user in that group without permission to a
document in the folder. You can try a test in another computer.
Please clear your browser Cache and then test again.
If the issue still exists
 , please don’t hesitate to let me know.
Best Regards
Wendy Li
TechNet Community Support

Similar Messages

  • Some of the subfolders will not show bookmarks when I click on the folder containing the subfolder.

    I have three computers. 27" iMac, 11" MacBook Air, 13" MacBook Pro. All my bookmarks are synced with Xmarks. On the iMAc and the MacBook Air, the bookmarks work as they should. The bookmark list drops down when I click on Bookmarks and all the subfolders within the main folders contain the bookmarks I have saved in them. On the MacBook Pro this is not the case for one of my folders. It contains about 10 or 12 subfolders and only 5 or 6 of the subfolders show bookmarks when highlighted.
    I have tried uninstalling and reinstalling Firefox and then syncing bookmarks again but the problem still persists. I have checked file permissions and they are set as they should be.
    I am now at a loss for what to do.

    Sorry, that sounds like a question for Xmarks support. You aren't using both Xmarks '''and''' Firefox Sync, are you? We have had a number of support posting about problems similar to what you are seeing when using both.

  • In iPlanet Web Proxy Server 3.6 on Win2000, how do I turn on authentication?  I want to force users to enter an id and pw when they go thru the proxy to websites out on the net. Thanks

     

    Mal,
    You'll need to point to some user database, either the local db on Proxy or an ldap server. The ldap server is the best choice as the local db just stores users in a flat file and becomes unreliable after 1000 entries.
    To enable authentication, manage the proxy server instance and navigate to Restrict Access.
    From there, turn on access control, and click on the Permissions button. This will open up a new window to allow you to setup your access control rules and restrictions. When you're done, click on Done, apply your changes and restart the proxy server and you should be on your way.

  • How to apply "user configuration" of GPO of specific OU when they login on specific computers?

    For example:
    Only users belong to OU1 cannot access control panel when he log on to computer1 which belongs to OUA, how to do that with GPO?
    The users in OU1 CAN access control panel when they log on the computers which NOT in OUA, and users who are not belong to OU1 CAN access control panel when log on  computer1.
     thanks.

    It sounds like you need loopback enabled. Loopback allows you to apply user side settings to a computer.
    http://deployhappiness.com/loopback-policy-how-a-computer-gets-a-transgender-operation/
    http://deployhappiness.com/questions-about-loopback-policy-processing/
    If my answer helped you, check out my blog:
    Deploy Happiness

  • When I attempt to Extend a PDF document via my LiveCycle server I get the error"Application Alert" The file could not be saved. Are you sure you want to lose your results?

    When I attempt to Extend a PDF document via my LiveCycle server I get the error"Application Alert" The file could not be saved. Are you sure you want to lose your results?
    I can login fine via this address.
    http://[Server Address]:[Port Number]/ReaderExtensions
    And I can apply the extension successfully, but when I attempt to download I receive the error above.
    Application Alert" The file could not be saved. Are you sure you want to lose your results?

    Please check the supported version of flash player on your client machine for LiveCycle : http://bit.ly/1wGD9t4
    Upgrade or downgrade it accordingly.
    Thanks,
    Wasil

  • I have an iPhone 4 and want to be able to send photos via ams. I hold down the copy button on the picture but when I go to paste it in the text of a message it won't paste. Any ideas on this please.Thanks

    I have an iPhone 4 and want to be able to send photos via sms. I hold down the copy button on the picture but when I go to paste it in the text of a message it won't paste. Any ideas on this please??Thanks

    No phone can send photos via SMS. You would need MMS (or iMessage or a 3rd party app such as WhatsApp). SMS messages are limited to 160 characters of text only.

  • When I receive word documents via my yahoo on my mac, the format always come up as a TEXTEDIT doc.  This is causing me serious problems.  How do I enable my documents to open in the original format it was sent?

    when I receive word documents via my yahoo on my mac, the format always come up as a TEXTEDIT doc.  This is causing me serious problems.  How do I enable my documents to open in the original format it was sent?

    Do you have Microsoft Word installed on your Mac? If so, you can reassign all .doc files to Word by selecting the file in Finder and choosing "File > Get Info" from the menu. In the window that opens look for "Open with" and change the entry to "Microsoft Word".

  • My facetime doesnt work. If I call somone they see I call but when they accept it doesnt work and when they call me the green camera light turns on but no sound or pop up of the video chat screen appears, please help! Macbook pro user. MacBook Pro, OS X M

    My facetime doesnt work. If I call somone they see I call but when they accept it doesnt work and when they call me the green camera light turns on but no sound or pop up of the video chat screen appears, please help! Macbook pro user.
    MacBook Pro, OS X Mountain Lion

    I just wanted to follow this up by saying that you were entirely correct in your diagnosis of the situation.  My computer did have the faulty part you linked to.  I brought my laptop in and specifically told them to run that test, had it fail and then argued with the person at the genius bar and the manager.  Eventually they offered to have it sent out and have everything replaced for free of charge.  They did so mainly because I had complained about graphical issues almost every other time I had come in with problems and no one ran the test.  They should have caught this problem during my warranty, but they didn't, even though I mentioned the problem.
    Anyhow, after having the part replaced, I haven't had my computer crash a single time since, or had many of the issues mentioned above.  I've never had this experience before.  Even brand new, I got occasional crashes.  Hopefully this new trend continues.
    I do find that web browsing is still incredibly slow.  Web browsers just chug along at a slow pace, even though I have great internet speed.  Maybe I'll try just deleting my web browsers and reinstalling them...
    Anyhow, thank you for your help and knowledge Clinton.

  • I bought a movie via itunes but i cannot see it. why?

    I bought a movie via itunes but i cannot see it. why?

    When did you buy, and what did you buy it on (computer, iOS device), and by 'cannot see it' you mean ... ? If you've just bought it then it should have downloaded onto the device/computer that you bought it on - so into the Movies part of your iTunes library if using your computer, the Videos app if using an iOS device.
    If it's a film that you bought it in the past then you might not be able to redownload it if you've changed countries since buying it, the rights-holder doesn't allow redownloading, or if it's no longer in your country's store.

  • When I connect my apple tv to my access point upstair and connect my ipad to the same access point i cant see my apple tv when i open up the airplay menu on my ipad. but i can see the apple tv in the living room downstair which connect to the main router

    when I connect my apple tv to my access point upstair and connect my ipad to the same access point i cant see my apple tv when i open up the airplay menu on my ipad. but i can see the apple tv in the living room downstair which connect to the main router.
    Below is some info i get about ports.
    I tried to set DMZ on my main router to have full access to ported to access point upstair which is in the ip of 192.168.1.2 and the main router in the living room is the gateway router with the 192.168.1.1 ip.
    I still cant see apple tv after i try the DMZ method.
    any suggestion ?
    These network ports are used by Apple TV for communications on your network.
    TCP port 123 is used to communicate with a network time server.
    TCP port 3689 is used to communicate with iTunes while using the iTunes Library Sharing feature.
    UDP port 5353 is used by Apple TV for automatically finding computers with iTunes on your network using Bonjour.
    TCP port 80 is used for communicating with podcast servers.
    TCP port 80 and 443 are used for basic and secure communications with the iTunes Store via the Internet.
    TCP port 53 is used for regular DNS.
    These are well-known ports used by Apple products, like iTunes. If you can use all the features of iTunes, these ports are likely already open on your firewall or NAT router. Note: These ports may also used by other services such as YouTube and Flickr.

    When the Apple TV is paired with a remote, it means only that remote can control it, when it's not paired any remote can control it. You will need a remote for each of your devices.

  • When we got our computer it all ready had 2 user names on it Administrator and Teacher and we dont know the passwords for them.

    When we got our computer it all ready had 2 user names on it Administrator and Teacher and we dont know the passwords for them.

    Assuming you have been able to set yourself up as an Administrator so far, you can just go into Applications>System Preferences>Users & Groups and delete the other three accounts by highlighting them one at a time in the left hand column and clicking the "Minus" symbol at the bottom of the column.
    If you have NOT been able to set yourself up as an Administrator also so far, then the following article should help:
          http://www.macworld.com/article/1164599/reset_password_lion.html
    Hope this helps

  • Mac desktop. 10.6.8. Text edit. Not locked. Read and write. Still, documents are locking when they are moved from desktop to another folder on the server. Techies can't figure it out here. What am I not doing?

    Mac desktop. 10.6.8. Text edit. Not locked. Read and write, not read only. Documents are locking when they are moved from desktop to another folder or saved directly into that folder on the server. Not happening with anyone else but me and the boss's computer so has to be in the properties for my text edit software. Techies can't figure it out after trying for two weeks. Boss can do a cut and paste and put into a new document, but that's starting to become a problem.

    Mac desktop. 10.6.8. Text edit. Not locked. Read and write, not read only. Documents are locking when they are moved from desktop to another folder or saved directly into that folder on the server. Not happening with anyone else but me and the boss's computer so has to be in the properties for my text edit software. Techies can't figure it out after trying for two weeks. Boss can do a cut and paste and put into a new document, but that's starting to become a problem.

  • HT204268; I have purchases on an aol login pre 2008 and all recent stuff under an apple id. I currently see and use everything when i login with the apple id. After March 31st will my apple id account still show and contain all?

    HT204268; I have purchases on an aol login pre 2008 and all recent stuff under an apple id. I currently see and use everything when i login with the apple id. After March 31st will my apple id account still show and contain all?
    I understand the instructions to create a new account id (apple id) from the old aol account. However, does this mean my purchases will be split into 2 accounts; or does the fact that I currently see everything under my apple id (regardless of the purchased by username) mean this will all still appear in my current account as it does now?

    You see them where when you login your non-AOL account ?
    If you currently have two accounts (the AOL username account and an email address account) then you will continue to have two accounts, and nothing should change when you update the AOL account to be an email address (apart from how you access that account).
    You will just be renaming the account to have an email address for accessing it, not creating a new account.

  • Seeing multiple iPhoto libraries when I click on the iPhoto icon in the dock?

    I can't figure out why I am seeing multiple iPhoto libraries when I click on the iPhoto icon in my dock.  I am running Lion on an early 2008 MacBook Pro (4 GB RAM), and when I click and hold on the iPhoto icon in the dock, it brings up a dialog box.  From top to bottom, this is what I see:
    iPhoto Library
    iPhoto LIbrary
    iPhoto Library
    Options
    Show Recents
    Open
    I can't figure out why it shows three iPhoto libraries when I only have one on my computer.  I've tried deleting the icon from the dock and then putting it back in the dock, but it still shows three libraries for some reason.  If I search for iPhoto in spotlight search or in finder, it only shows one iPhoto (in the applications folder).  Any help on how to resolve this weird issue would be much appreciated!

    I have the same issue.  I see four iPhoto libraries when I right click on the iPhoto icon in the dock, but I only actually have two libraries.  The other two simply do not exist on my computer.  And when I click on the libraries that do not exist, obviously nothing happens.  In the image, only the bottom two libraries are actual photo libraries.  The top two do not exist.
    I have relaunched Finder, restarted the computer, and even restored the entire computer from my Time Machine backup.  Nothing changes.  No matter what I try, the non existent iPhoto libraries continue to be present when I right click the iPhoto icon in the dock.  BTW, there are only two iPhoto libraries in the pictures folder.
    This is very frustrating and annoying.

  • Transferring rental:  what to do when itunes cannot see it in movie tabs but can see it in rental list?

    my ipad2 is connected to my mac mini.
    and i selected my device in itunes.....  
    when i click on the movies tab    i can only "see" one movie listed.    
    but can "see" two when i look at the list of items on my device under rental
    how do i move the movie to my mac when itunes cannot "see" it under the rental tab but itunes does "see" it in the rental list for my device?

    Click here and install the software.
    (71836)

Maybe you are looking for

  • OWB Installation problem on AIX 5.2

    Hi, We are trying to install OWB 9.2.0.2.8 on IBM AIX 5.2 using the download version from OTN. Following installation instructions, we have removed all references to existing ORACLE_HOME in the environment variables: CLASSPATH, PATH, LIBPATH and LD_L

  • Can I use Organizer to change the .jpg size of all photos in a folder in one batch process?

    We're using wa-a-ay too much disk space for a growing photo collection.   My daughter is a camera freak with four kids -- need I say more?  In my current test folder the sizes of the original photos range from 2.3 MB to 4.2 MB.  I picked one photo at

  • SOAP/HTTP adapter for ABAP proxy

    Hi, Is it possible to send data to a SAP system using an inbound proxy and  SOAP/ HTTP adapter. As per my knowledge , XI adapter is generally used for Proxy communication. If SOAP/HTTP can be used then what should be the message protocol. There are 2

  • Icon size Local Files display

    Is there any way to make the icons in the local view and the CSS styles panel bigger? I'm running cs 6 on a mac 2560 X 1440 Lion

  • Aperture: Can I backup my entire Aperture library at once?

    Soon I will be backing up my my entire notebook to a portable external hard drive to be placed in a safety deposit box as an off site backup. For a general day to day back up I use Aperture's Vault system. But I am very hesitant to do so for a MASTER