Controlling permissions on files within Document Libraries

We're using a document library with a workflow that automates all the handling for internal documents.
One of the requierements for this system is that documents have to be only visible to certain people depending on the stage of the process that the docoment's in, I almost accomplished this by changing each element permissions using a 2010 Workflow, but
there's a problem: Whenever a user uploads a new document, Sharepoint automatically locks it for edition, so the workflow can't change permissions as the file is uploaded, thus leaving the files visible for everyone in the system.
Is there any way in which I can set the default permision so that only the user who uploaded the file can see it? This way only that user could see the file while the workflow can get access to it and set the proper permissions.
Also, any other approach to this problem would be highly appreciated.
Thanks!

I'm not usually a fan of this approach, but have you tried moving the document among several appropriately permission restricted locations, corresponding to each step in the process? Would that be an option?
Chris
Chris McNulty MCSE/MCTS/MSA/MVTSP | blog http://www.chrismcnulty.net/blog | twitter @cmcnulty2000 Microsoft Community Contributor Award 2011

Similar Messages

How do I remove or delete files within a document folder? I have tried dragging the files to the trash and it does not work

How do I remove or delete files and image files within a document foler? I have tried dragging the files to the trash, but that is not working.

Right-click (or ctrl-click) on a file. If the "move to Trash" option is greyed out, select "get info" and read the permissions at the bottom of the info window.
Wat are they?
Do the same for the enclosing folder - what permissions does that have?

Need help writing script to change version control for all document libraries in all sites

Hello,
I found this script, http://get-spscripts.com/2010/10/changing-sharepoint-list-settings-using.html that
changes versions control for a document library. However, many sites have many document libraries with different names. The script below just changes a the settings to a document library that is named "Shared Documents", but does not
change one if its named something else. How can change the script to loop through all document libraries so their settings are changed?
$site = Get-SPSite http://site
$listName = "Shared Documents"
#Walk through each site in the site collection
$site | Get-SPWeb |
ForEach-Object {
#Get the list in this site
$list = $_.Lists[$listName]
#Create a version each time you edit an item in this list (lists)
#Create major versions (document libraries)
$list.EnableVersioning = $true
#Create major and minor (draft) versions (document libraries only)
$list.EnableMinorVersions = $true
#Keep the following number of versions (lists)
#Keep the following number of major versions (document libraries)
$list.MajorVersionLimit = 7
#Keep drafts for the following number of approved versions (lists)
#Keep drafts for the following number of major versions (document libraries)
$list.MajorWithMinorVersionsLimit = 5
#Update the list
$list.Update()
#Dispose of the site object
$site.Dispose()
Paul

Sorry, I agree. It will update Style Library and other out of the box ones. Include the library titles in a collection and run the update against them provided these libraries are common across all sites. If not, you will have to first get an extract of
all such libraries in all sites say in a CSV file and then update the script below to refer to the CSV records.
Add-PSSnapin "Microsoft.SharePoint.PowerShell" -ErrorAction Stop;
#List of Libraries to be updated.
$Libraries = @("Shared Documents","My Document Library");
$spAssgn = Start-SPAssignment;
$site = Get-SPSite http://site -AssignmentCollection $spAssgn
#Walk through each site in the site collection
$site | Get-SPWeb -Limit ALL -AssignmentCollection $spAssgn |
ForEach-Object {
#Enumerate through all document libraries
$_.Lists|Where{$_.BaseTemplate -eq "DocumentLibrary" -and $Libraries -contains $_.Title}|Foreach-Object{
#Get the list in this site
$list = $_;
#Create a version each time you edit an item in this list (lists)
#Create major versions (document libraries)
$list.EnableVersioning = $true
#Create major and minor (draft) versions (document libraries only)
$list.EnableMinorVersions = $true
#Keep the following number of versions (lists)
#Keep the following number of major versions (document libraries)
$list.MajorVersionLimit = 7
#Keep drafts for the following number of approved versions (lists)
#Keep drafts for the following number of major versions (document libraries)
$list.MajorWithMinorVersionsLimit = 5
#Update the list
$list.Update()
Stop-SPAssignment $spAssgn;
This post is my own opinion and does not necessarily reflect the opinion or view of Slalom.

Restoring permissions to a site and document libraries

We have SharePoint sites (SPWeb) with unique permissions (permissions inheritance broken). Each site has several document libraries in it. The document libraries also have their permissions inheritance broken. Users are assigned to
a custom permissions level at the document library level and at the same time they are given Limited Access permission level at the site level. Apparently, one of the document libraries was still inheriting permissions. A customer with site
admin rights was trying to remove some user permissions for the document library that was still inheriting permissions. Because the permissions were still being inherited, they were taken to the parent site permissions page. They selected most
of the accounts and clicked Remove. They thought they were removing permissions for that document library but instead they removed permissions at the site level which means that they removed permissions to all document libraries for these accounts.
My question is: I have a content database backup from last night. I also have a full farm backup (done via Central Admin) from a month or two ago. Is there any way to restore those permissions ( to the site and document libraries) from one
of these backups? I cannot restore the whole site collection because the other sites in this site collection are not affected by this. I can only restore an SPWeb object. However, is my understanding correct that restoring the SPWeb is only
going to restore the content and not the permissions? Is there any other way to restore users permissions at the site and document library level from the two backups I have?
thanks,

I do not think its possible to restore permissions only.
You have to restore another site from backup and then map user permissions in all document libraries. If possible then develop a custom control which will check user permission on restored site and apply it on the production site.
Adnan Amin MCT, SharePoint Architect | If you find this post useful kindly please mark it as an answer :)

Can I embed a PDF file within a Pages document?

I am working with Pages '09 and would like to embed a rather long PDF document file into my Pages text. I want the reader to be able to click on the PDF file and have it open so that the reader can gather more information on the subject without making the actual Pages document text any longer. I don't want the PDF file to be an external link that sends the reader away from the document -- I want to know if I can embed the PDF file WITHIN the pages document and have it open only when clicked. I don't think I can do this. Thanks.
Small Town Gal.

I found my answer within archived discussions - convert the file to a PDF and then embed the PDF file as an attachment. Thanks.
Barbara Smits

Controlling sound of separate html files within the same html page.

I need to allow users to preview audio files for purchasing. I have CF pages that return records form a SQL database. Each record contains the same swf file however, each swf file points to a different mp3 for previews of different audio examples. So far, everything is working fine. My problem is that I need to be able to stop the sound from one swf when I click to play a second swf. The only solutions I see in Flash forums deal with loaded swf files. These are not loaded files they are separate files within a page. The question is: How do control one swf from another swf in the same page. The following items have not worked:
soundChannel.stop();,
soundMixer.stopAll()
I think my solution may be to use ExternalInterface but I am not sure where to begin with this. Any suggestion would be appreciated.

you need to use the localconnection class to communicate between swfs open at the same time by the same client.

Valid users can see a site, but not the document libraries they have permissions for

Hello everybody,
at a customer's site, there is SharePoint Foundation 2013 SP1 running, bound to both http and https. Seeminlgy out of nothing, a strange behavior occurred: Visting
http://intranet/subsite showed the page headers (logo, global navigation etc.), but no content. The welcome text was missing as well as the links to the document libraries which should appear in the left navigation.
After explicitely adding http://intranet as an alternate name (https://intranet was active only, don't know why), we can again reach content via http. Still strange appears, that
http://intranet global navigation links get redirected to https (fine, but unexpected). If we change a deep link to a document library from https to http in the browser's address bar, we can reach the content fine.
However, one problem still exists: This site gets published via TMG 2010 via https, and that also worked just fine for many months. But now, I can try what I want in TMG, valid authenticated users see only the top navigation, but no content at all.
Can anyone give me a hint about what to check? Of course, I will provide any info you may need.
Best Regards, Stefan Falk

Hello Daniel,
Thank you for your response. As to your questions:
I just added http://intranet to the alternate access mappings of the intranet zone and did not extend a website.
Besides SharePoint Central Administration, there is no other SharePoint web site collection on this server, and no other non-SharePoint-IIS-Site. This is a VM for nothing else than hosting this single intranet site collection.
We do see the same issue under two sub-websites underneath
http://intranet, namely http://intranet/Datenaustausch and
http://intranet/Protokolle. In both sub-sites, there is some welcome text on the home page and there are several document libraries, each with permissions not interited, but explicitely granted to specific users.
The first (solved) issue was, that we could not see the document libraries when using http, but could see them using https. This was solved by adding the alternate access mapping for
http://intranet explicitely.
We can successfully browse the sites (using http and https now) from the internal network. The one issue left is that the same does not work through TMG, that is, coming from the external network, we can see and call up the sites in a browser, but not any
content in them. We do see the site title and logo, and the global navigation at the top of the page, but we do not see the welcome text, nor the document libraries. This did work last week, and we do not know nor could find, why it stopped working. The issue
persists regardless of whether we use bridging to https or to http between TMG and SharePoint.
We have already restarted the SharePoint box, with no success.
If I can provide any further information needed, I will be glad to do so.
Best Regards, Stefan Falk

How do you change the default permissions for files?

I have all my users saving (via AFP) to an Xserve RAID, I am using ACL to control who has access to certain area.
This is fine when moving files in the finder, all ACL are respected, however when saving files from Photoshop it ignores the ACL's.
So if user A saves a file they become the owner- which is fine, but the group and everyone permissions are read only, so when user B ammends the file they get a permission warning when they try to save, the work round I'm using is to trash the file just before you try to save- not ideal cos if the save fails you've lost the work.
What I would like is for the default permission to be group "design" Read and Write and leave everyone as read only
So when any designer goes to oversave a file in photoshop they can do.
I needf to leave ACL's on as they are working well in every other situation, i.e I have certain folders set so once images have been added they cannot be deleted or renamed by certain users.
It only seems to be Photoshop that gives us this problem, Quark files and other docs are able to be saved according to the ACL

Hi
There are some important distinctions and points to be made here.
POSIX Permissions are always set for every file and folder. ACLs are optional for any file, folder or share point and work IN ADDITION to POSIX Permissions. SACLs (Service Access Control Lists) are optional for specific services such as AFP, FTP, SMB, Mail etc and are independent of files and folder as well of standard POSIX Permissions and file system ACLs. Allow access is cumulative and Deny access is first match.
ACLs supersede but don’t necessarily override Standard UNIX permissions.
The best way to use ACLs is to enable Access Control Lists on the desired volume, create the share point folder from within Workgroup Manager, define the Users and Groups and then drop the relevant User and/or Group into the ACL window and define access privileges from there. Don’t be tempted to use the Standard UNIX permissions in addition to ACLs as all sorts of problems can ensue.
Privileges and access can quickly get confused and share points can be broken. Deny settings defined in ACL take precedence over all other privileges settings. Deny settings defined using Standard UNIX as well as ACLs can, in some cases, mean share points becoming inaccessible to all users even those with administrative privileges.
Wherever possible try not to set access privileges using the Finder.
For a much fuller explanation and a method for calculating umask values consult Gerrit de Witt’s series of articles:
http://discussions.apple.com/thread.jspa?messageID=648307&#648307

Unable to add aspx file to document library using REST and JSOM in SharePoint Hosted App

Hi,
I am unable to add an aspx file to document library. I was actually trying to create a WIKI page and upload to Pages library but that wasn't working so I tried simple document library. It keeps failing with Access Denied error. I have checked
the blocked types and aspx is not included. I can upload it directly from the browser so that shouldn't be the case. I have read that it can be achieved with CSOM but I need this to work with a SharePoint Hosted App. Here is my JSOM:
factory = new SP.ProxyWebRequestExecutorFactory(appweburl);
context.set_webRequestExecutorFactory(factory);
appContextSite = new SP.AppContextSite(context, hostweburl);
oWeb = appContextSite.get_web();
oList = oWeb.get_lists().getByTitle('Documents');
fileCreateInfo = new SP.FileCreationInformation();
fileCreateInfo.set_url("mywiki.aspx");
fileCreateInfo.set_content(new SP.Base64EncodedByteArray());
fileContent = "<%@ Page Inherits=\"Microsoft.SharePoint.Publishing.TemplateRedirectionPage,Microsoft.SharePoint.Publishing,Version=15.0.0.0,Culture=neutral,PublicKeyToken=71e9bce111e9429c\" %> <%@ Reference VirtualPath=\"~TemplatePageUrl\"
%> <%@ Reference VirtualPath=\"~masterurl/custom.master\" %>";
for (var i = 0; i < fileContent.length; i++) {
fileCreateInfo.get_content().append(fileContent.charCodeAt(i));
newFile = oList.get_rootFolder().get_files().add(fileCreateInfo);
context.load(newFile);
context.executeQueryAsync(function () {
alert('yo');
}, function (sender, args) {
alert(args.get_message() + '\n' + args.get_stackTrace());
If I change the file extension to "txt", it works. Same with REST implementation, it works with "txt" but fails with "aspx". Maybe what I am trying to do will not work using JSOM or REST. Any suggestions? Your
help is always appreciated.
Regards,
kashif

Your code works fine in both my on-premises and SharePoint Online. I have given the app full control, so I suspect this is a permissions issue. I would check your permissions on your appmanifest. Must be something to do with publishing permissions. Try
giving full control and work the permissions down.
Blog | SharePoint Field Notes Dev Tools |
SPFastDeploy | SPRemoteAPIExplorer

Access Denied only when deleting items from document libraries

This is across the farm every user is effected. Everything has been working fine for years without issue. First thing I noticed the other day was when opening a document (any document) and clicking "Edit Document" I'm prompted
with "there is a new version on the server, do you want to use it" Click yes and go about my business. I can replicate this with brand new documents that have no changes. Not sure if that is related but thought it should be included.
Now on to the real problem.
No permissions have changed.
Users can created new items in document libraries, edit them without issue. Try to delete them "Access Denied" Go into DataSheet view and/or Explorer view and can delete all day long.
Any ideas?

It is very strange at least admin should allow to delete if there is no additional customization on library. Can you also check if there is checkin/checkout enable in library and file in checkedout mode.
Do one more testing, upload new document in same library and check whether user is able to delete new file or not.
>All lists across the farm. No policies.
As you said this is happening across all the lists in site collection so have you tested the same in different site collection? if not then please do so.
Also check if by mistaken there is any modification in web application permission.
http://technet.microsoft.com/en-us/library/ff608071%28v=office.15%29.aspx
Let us know your result
Hemendra:Yesterday is just a memory,Tomorrow we may never see
Please remember to mark the replies as answers if they help and unmark them if they provide no help

"Object reference not set to an instance of an object" error while accessing document libraries after in place upgrade to SP 2010

I performed an inplace upgrade on my sharepoint 2007 installation and post the upgrade while trying to browse the document libraries on the site i get the following Error. HAs anyone encountered a similair error?? What could be the cause and resolution
for this
Any pointers/solution appreciated.
Description: An
unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception
Details: System.NullReferenceException: Object reference not set to an instance of an object.
Source
Error:
An unhandled exception was generated during the execution of the
current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.
Stack
Trace:
[NullReferenceException: Object reference not set to an instance of an object.]
Microsoft.SharePoint.WebPartPages.ListViewWebPart.PrepareContentTypeFilter(SPList list, Hashtable[] excludedTransformers) +682
Microsoft.SharePoint.WebPartPages.ListViewWebPart.GenerateDocConvScriptBlock(SPWeb web, SPList list) +482
Microsoft.SharePoint.WebPartPages.XsltListViewWebPart.OnPreRender(EventArgs e) +571
Microsoft.SharePoint.WebPartPages.WebPartMobileAdapter.OnPreRender(EventArgs e) +78
System.Web.UI.Control.PreRenderRecursiveInternal() +11032094
System.Web.UI.Control.PreRenderRecursiveInternal() +223
System.Web.UI.Control.PreRenderRecursiveInternal() +223
System.Web.UI.Control.PreRenderRecursiveInternal() +223
System.Web.UI.Control.PreRenderRecursiveInternal() +223
System.Web.UI.Control.PreRenderRecursiveInternal() +223
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +3393
Version
Information: Microsoft .NET Framework Version:2.0.50727.4952; ASP.NET Version:2.0.50727.4955
My SharePoint Blog
http://dhireny.blogspot.com

How to be in my case??
[NullReferenceException: Object reference not set to an instance of an object.]
Microsoft.SharePoint.WebPartPages.ListViewWebPart.PrepareContentTypeFilter(SPList list, Hashtable[] excludedTransformers) +694
Microsoft.SharePoint.WebPartPages.ListViewWebPart.GenerateDocConvScriptBlock(SPWeb web, SPList list) +482
Microsoft.SharePoint.WebPartPages.XsltListViewWebPart.OnPreRender(EventArgs e) +571
Microsoft.SharePoint.WebPartPages.WebPartMobileAdapter.OnPreRender(EventArgs e) +78
System.Web.UI.Control.PreRenderRecursiveInternal() +11141054
System.Web.UI.Control.PreRenderRecursiveInternal() +223
System.Web.UI.Control.PreRenderRecursiveInternal() +223
System.Web.UI.Control.PreRenderRecursiveInternal() +223
System.Web.UI.Control.PreRenderRecursiveInternal() +223
System.Web.UI.Control.PreRenderRecursiveInternal() +223
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +3393

Batch code for running a find/replace all on multiple files within a source floder/directory

What I need is a Batch source code that will open all files in a folder/directory and run a find and replace_all query within them and then save all the files. The files were created in Illustrator and saved using the Scene7 FXG format extension.    These files will be uploaded into Scene7 as a group after the find and replace macro/query is run on the code. The same find and replace query will be the same for all the files. Basically this function or batch process will save time in setting the same parameters all at one time instead of having to set the parameters individually in scene7.
a source code sample of the find/replace module macro might be              searchString: s7:colorvalue="#FFFFFFFF"
                                                                                                                      replaceString: s7:colorValue="#&txtclr;"
                                                                                                                      searchWhat   "FXG document"
                                                                                                                         searchSource: true,
                                                                                                                    useRegularExpressions:   true
I have no problems creating batch files within Ai and PhotoShop but I have limited programming skills in how to create source code for manuipulating documents outside of those apps or in a OS invironment.
I could probably come up witha simple program to do what i want for one document but i get lost when dealing with multiple documents in a source folder (prolbem is, I will be dealing with thousands of documents not 100 or less)
If anything which Adope cloud app would work best: Dreamweaver or Edge code   (or just use my notepad)

What I need is a Batch source code that will open all files in a folder/directory and run a find and replace_all query within them and then save all the files. The files were created in Illustrator and saved using the Scene7 FXG format extension.    These files will be uploaded into Scene7 as a group after the find and replace macro/query is run on the code. The same find and replace query will be the same for all the files. Basically this function or batch process will save time in setting the same parameters all at one time instead of having to set the parameters individually in scene7.
a source code sample of the find/replace module macro might be              searchString: s7:colorvalue="#FFFFFFFF"
                                                                                                                      replaceString: s7:colorValue="#&txtclr;"
                                                                                                                      searchWhat   "FXG document"
                                                                                                                         searchSource: true,
                                                                                                                    useRegularExpressions:   true
I have no problems creating batch files within Ai and PhotoShop but I have limited programming skills in how to create source code for manuipulating documents outside of those apps or in a OS invironment.
I could probably come up witha simple program to do what i want for one document but i get lost when dealing with multiple documents in a source folder (prolbem is, I will be dealing with thousands of documents not 100 or less)
If anything which Adope cloud app would work best: Dreamweaver or Edge code   (or just use my notepad)

Display data from multiple document Libraries in List View Webpart

Hi All,
I want to display data from multiple document libraries into one list view webpart(custom i have created)
I went through the following link http://blogs.msdn.com/b/ramg/archive/2009/04/22/implementing-a-simple-cross-site-collection-list-view-webpart.aspx
but it tells to display only from one document library.
My motive behind displaying data in the list view webpart is to achieve the functionality of Check In ,Check Out and other OOB features.
With Regards,
Jaskaran Singh

Hi,
As there is no such OOTB feature, a workaround is to create a visual web part to gather items from libraries and implement functionalities like Check in, Check out files
in different libraries.
The links below will provide more details:
Create Visual Web Parts in SharePoint
2010
A demo about displaying list items in visual web part:
http://www.dotnetcodesg.com/Article/UploadFile/2/217/Web%20Part%20in%20SharePoint%20To%20Show%20All%20List%20and%20List%20Items.aspx
About the Check In and Check Out:
How to Check In a document programmatically
SPFile.CheckIn method
and SPFile.CheckOut method
Best regards
Patrick Liang
TechNet Community Support

How do I delete images in Finder's "all my Files" when I have the same pictures in a file in Documents? It seems like a lot of duplication. If I delete the individual image it disappears in the folder. Thank You.

How do I delete images in Finder's "all my files" without deleting the images in a separate folder I have in Documents? It seems to be so much duplication. Just set up our new Mac and am not understanding how the files work. Thank you.

All My files is a "search folder"
it isn't real storage location. All files within your home folder are found by the criteria set for the search folder and displayed to you In one place.
If the folder doesn't meet your needs, remove it from the sidebar.

How to add a button in top ribbons of ALL library types (Not just document libraries)?

Hi there,
How to add this custom button on all Library Types (Not just document libraries)?
RegistrationId="101" RegistrationType="List" adds this button to Document Libraries only - which does not work for me.
Thanks so much.

Hi,
According to your post, my understanding is that you wanted to add a custom button on the ribbon of all the library.
You can refer to the following code snippet, it would add a custom button “Site Settings” on the ribbon of all the libraries.
<?xml version="1.0" encoding="utf-8"?>
<Elements xmlns="http://schemas.microsoft.com/sharepoint/">
<CustomAction Id="ListViewCustomization" Location="CommandUI.Ribbon.ListView" RegistrationId="101" RegistrationType="List" Title="List View Ribbon Customization">
<CommandUIExtension>
<CommandUIDefinitions>
<CommandUIDefinition Location="Ribbon.Documents.Share.Controls._children">
<Button Id="ListViewButton" Command="ListViewButtonCommand" Description="Go to Settings" LabelText="Site Settings" TemplateAlias="o2" Sequence="93"/>
</CommandUIDefinition>
</CommandUIDefinitions>
<CommandUIHandlers>
<CommandUIHandler Command="ListViewButtonCommand" CommandAction="/_layouts/settings.aspx" />
</CommandUIHandlers>
</CommandUIExtension>
</CustomAction>
</Elements>
More reference: http://msdn.microsoft.com/en-us/library/ms473643.aspx
Thanks & Regards,
Jason
Jason Guo
TechNet Community Support

Controlling permissions on files within Document Libraries

Similar Messages

Maybe you are looking for