Giving List Permission to users with no access to the main site

On my sub site I have a list (where users from a specific store can report errors). This list I want to share with another group of users, those who will do something about the errors (entrepreneurs). I want them to be able to Edit in this list: they don't
need delete and create items, just being able to change an item is fine.
The problem is, I don't want them to have access to the sub site itself, because there is information on the sub site that they don't need to know about, they should only see this list. So they don't have any access at all to the sub site, but I'm giving
them permission to the list.
However, it seems like since they can't access the sub site, no matter what permission I give them to the list (Edit, Contribute, Full Control), in the end they only have Reading-access to the list and can't even update an item.
This error message turns up whenever they try:
"Unable to communicate with server".
The entrepreneur group is external users, but that shouldn't matter, should it? I've added them to SharePoint groups with the right permissions.
Is there any possible way to solve this problem?

Hi ,
Here is the steps you can refer to:
Go to your site ->Site Settings ->Site permissions ->Permission Levels ->Click “Add a Permission Level” and create a custom permission level with following permissions :
Edit Items, View Items, Open Items, View Pages , Open.
Go to your list ->Shared With -> INVITE PEOPLE :
input your group, click “SHOW OPTIONS”
and select the new custom permission level.
Best Regards,
Eric
Eric Tao
TechNet Community Support

Similar Messages

Users with read access to the site unable to view Managed Metadata Navigation

Hi everyone,
I created a Managed Metadata service and created group, term-set and terms
I gave read access to users
I set up navigation to use Managed Navigation
I am logged in as farm admin and able to view the navigation when i browse site. But user are not seeing navigation.
One thing i noticed is when i give users full access or designer access to site they will be able to see the navigation. but i don't want to give users full access or designer access to the site.
How can users with read only access to site can view Managed Metadata Navigation...Please help?

Hi Sunil,
Have you given your users permissions to actually read the MMS data from the service application?
http://technet.microsoft.com/en-us/library/ff625176.aspx covers permissions on the MMS.
Regards
Paul.
<<edit>> On reflection you might be hitting the issue in this Stackexchange post..
http://sharepoint.stackexchange.com/questions/75636/permissions-and-managed-metadata-in-navigation Is yours behaving the same way?
Please ensure that you mark a question as Answered once you receive a satisfactory response. This helps people in future when searching and helps prevent the same questions being asked multiple times.

How to get list of active users with the details like samaccountname, name, department, job tittle, email in active directoy?

how to get list of active users with the details like samaccountname, name, department, job tittle, email in active directoy?

You can use third party software True Last Logon 2.9.You can export the file in excel for report creation.You can use the trial version this will achieve what you are looking for.
True Last Logon displays the following Active Directory information:
--Users real name and logon name
--Detailed account status
--Last Logon Date & Time
--Last Logon Timestamp (Replicated value)
--Account Expiry Date & Time
--Enabled or Disabled Account
--Locked Accounts
--Password Expires
--Password Last Set Date & Time
--Logon Count
--Bad Password Count
--Expiry Date
--You can also query for any other attribute (Example: Description, telephone Number, custom attibutes etc)
Refer the below link for trial version:
http://www.dovestones.com/products/True_Last_Logon.asp
Best Regards,
Sandesh Dubey.
MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator |
My Blog
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Users with direct access to tables

I need to find out which users have direct access to tables, not through the roles.
Is dba_tab_privs the right table to query or table_privileges is the correct one.
Please let me know the difference between these two.
I have gone through the documentation but I am still not clear about the difference between them.
Let me know whatever your thoughts are on this.
Thanks,
Rushi

Ah, an opportunity to illustrate the value of COMMENTs:
SQL> select * from dict where table_name = 'TABLE_PRIVILEGES';
TABLE_NAME
COMMENTS
TABLE_PRIVILEGES
Grants on objects for which the user is the grantor, grantee, owner,
or an enabled role or PUBLIC is the grantee
SQL> select * from dict where table_name = 'DBA_TAB_PRIVS';
TABLE_NAME
COMMENTS
DBA_TAB_PRIVS
All grants on objects in the database
SQL>So, TABLE_PRIVILEGES is a view relevant to the user who is currently connected and SELECTing from it.
DBA_TAB_PRIVS is what you want to use to find users with direct access granted to tables.

Security batch job to evaluate users with SAP_ALL access:

Hello,
I need to run some kind of batch report or program that runs for users that have SAP_ALL access.
Basically we need to run a report or program that shows what these users that currently have SAP_ALL are executing on a daily basis.
Do you have or know of a report/program that we can schedule nightly to find this information out ?
Thanks,
Steve

Hi Steve,
I don't think any SAP standard report or query is available for this. You probably have to design your own Z report/query to achive this.
However since SAP_ALL is a restricted access and you will have very few users with this access, if you want to find it out programs/transation being executed by these users, it can be done manually from ST03, through "Memory Use Statistics", probably this may help to identify the tables using which you can design your own report.
Regards,
Sanujit
Edited by: Sanujit Purohit on Jul 20, 2010 2:25 AM

Set Single user with reviewer access to multiple conference room calendars

Want to add a single user with reviewer access to multiple conference room calendars, used the below but it given a below error , Single user i am able to add but single user for multiple confernce room calendars hot happening.
Import-csv C:\smtp1.csv | foreach-object {Add-MailboxFolderPermission -identity $_mail":\Calendar" -User "Mike" -AccessRights "Reviewer"}
Smtp1.csv
mail
[email protected]
[email protected]
Error:--
[PS] C:\>Import-csv "C:\smtp1.csv" | foreach-object {Add-MailboxFolderPermission -identity "$_mail:\Calendar" -User "Mike" -AccessRights "Reviewer"}
The specified mailbox "\Calendar" doesn't exist.
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-MailboxFolderPermission], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : 78C23328,Microsoft.Exchange.Management.StoreTasks.AddMailboxFolderPermission
The specified mailbox "\Calendar" doesn't exist.
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-MailboxFolderPermission], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : 78C23328,Microsoft.Exchange.Management.StoreTasks.AddMailboxFolderPermission
The specified mailbox "\Calendar" doesn't exist.
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-MailboxFolderPermission], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : 78C23328,Microsoft.Exchange.Management.StoreTasks.AddMailboxFolderPermission
The specified mailbox "\Calendar" doesn't exist.
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-MailboxFolderPermission], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : 78C23328,Microsoft.Exchange.Management.StoreTasks.AddMailboxFolderPermission

i tried with that as well but getting the below
A positional parameter cannot be found that accepts argument ':\Calendar'.
    + CategoryInfo          : InvalidArgument: (:) [Add-MailboxFolderPermission], ParameterBindingException
    + FullyQualifiedErrorId : PositionalParameterNotFound,Add-MailboxFolderPermission
A positional parameter cannot be found that accepts argument ':\Calendar'.
    + CategoryInfo          : InvalidArgument: (:) [Add-MailboxFolderPermission], ParameterBindingException
    + FullyQualifiedErrorId : PositionalParameterNotFound,Add-MailboxFolderPermission
A positional parameter cannot be found that accepts argument ':\Calendar'.
    + CategoryInfo          : InvalidArgument: (:) [Add-MailboxFolderPermission], ParameterBindingException
    + FullyQualifiedErrorId : PositionalParameterNotFound,Add-MailboxFolderPermission
Cannot process argument transformation on parameter 'Identity'. Cannot convert value "" to type "Microsoft.Exchange.Configuration.Tasks.MailboxFolderIdParameter". Error: "Valu
e cannot be null.
Parameter name: mailboxFolderId"
    + CategoryInfo          : InvalidData: (:) [Add-MailboxFolderPermission], ParameterBindin...mationException
    + FullyQualifiedErrorId : ParameterArgumentTransformationError,Add-MailboxFolderPermission

Failed to create a user with Mac Mini Server, the message "Failed to process the command writesettings" in the module "servermgr_sharing"

Failed to create a user with Mac Mini Server, the message "Failed to process the command writesettings" in the module "servermgr_sharing"

I have a Mac Mini with OS X Server 10.8.5 and Server 2.2.1 and have a problem to share the public folder.
When I enter the Server application to indicate that I want to share the public folder on the network and assign user I get the following message appears
And I can not share the folder.
If I go from my i-mac get mac mini server view and access the public folder, but I can not open any of the files there.
That I can do to fix this?
thank you very much

IDVD 7.1.2: I am making music instrument instructional DVDs, and I want to include several audio loops in that the viewer access from the main menu to play along with

iDVD 7.1.2: I am making music instrument instructional DVDs, and I want to include several audio loops that the viewer access from the main menu to play along with

Export the slideshow out of iMovie via the File ➙ Share ➙ File menu option as a 480p Quicktime movie.
Open iDVD, select a theme and drag the exported QT movie file into the open iDVD window being careful to avoid any drop zones.
Follow this workflow to help assure the best quality video DVD:
Once you have the project as you want it save it as a disk image via the File ➙ Save as Disk Image menu option. This will separate the encoding process from the burn process.
To check the encoding mount the disk image, launch DVD Player and play it. If it plays OK with DVD Player the encoding is good.
Then burn to disk with Disk Utility or Toast at the slowest speed available (2x-4x) to assure the best burn quality. Always use top quality media: Verbatim, Maxell or Taiyo Yuden DVD-R are the most recommended in these forums.
OT

A connection to the SharePoint site cannot be established. To synchronize or refresh your list, you must be able to connect to the SharePoint site

Hi,
I have a SharePoint 2010 farm with two Web Applications.
For example:
https://contoso.domain.com
https://finance.domain.com
Both Webapp use https --> 443. Same valid certificate for both (*.domain.com)
I tested exporting an Excel library in https://contoso.domain.com.
It export and sync up sucessful the Excel library and it updates it OK.
However, once exported the Excel library in https://finance.domain.com, when
I try to syncronize or update the library I receive an error back, which indicates: "A connection to the SharePoint site cannot be established. To synchronize or
refresh your list, you must be able to connect to the SharePoint site". I had tested the WebDav (Map Network Drive) and the connection results OK.
Do you have any idea about this issue?? Why https://finance.domain.com do not
synchronize or refresh in excel o SharePoint site???
I had tested the security with IIS, SSL, WebDav.
Thank you,
Gaby

Hi!!!
I solved this problem.
I created a new Application Web in the farm (https://project.domain.com), dismount content database the old application web ( https://finance.domain.com)
and the new application web (https://project.domain.com).
#New AppWeb project.domain.com
Get-SPContentDatabase -WebApplication https://project.domain.com | Dismount-SPContentDatabase -WhatIf
#Old AppWeb
Get-SPContentDatabase -WebApplication https://finance.domain.com | Dismount-SPContentDatabase -WhatIf
Mount the old content database to the new application web (https://project.domain.com).
Mount-SPContentDatabase "WSS_Content_Finance" -DatabaseServer "MyServer" -WebApplication https://project.domain.com
If you want to keep the same url, change the alternate access mappings.
Remember to change the bindings in IIS.
Hope you help the solution...
Gaby

Preventing the User from going back to the main page after logging out.

Hi all,
In my project I want to prevent the User from going back to the Main page, by clicking the back button of the browser, after the user has loggged out.I had invalidated the session so the user will not be able to do any operations, but he can vew the infos. I want to redirect to the login page if the user tries to go back using the back button after he has logged out.
I tried the same in this forum after loging out. Surprisingly it is the same. I can browse through all the operations i did even after logging out from here.
Is it not possible to do that in Servlets?Could somebody help?
Thanks,
Zach.

Hi,
You can use a servlet filter to do this , as it can interceptany request to your application you can decide to allow user access or not to any page/servlet.
public class Test implements Filter{
     public void destroy() {
     public void doFilter(ServletRequest arg0, ServletResponse arg1, FilterChain arg2) throws IOException,
               ServletException {
          System.out.println("filter");
          HttpServletRequest request = (HttpServletRequest) arg0;
          if(!request.getRequestURI().contains("index")){ // set condition that will be checked to verify if the user is logged in
               System.out.println("redirecting ... ");
               RequestDispatcher d = arg0.getRequestDispatcher("/index.jsp");
               d.forward(arg0, arg1);
          arg2.doFilter(arg0, arg1);
     public void init(FilterConfig arg0) throws ServletException {
}in you web.xml add :
<filter>
          <filter-name>test</filter-name>
          <filter-class>test.Test</filter-class>
     </filter>
     <filter-mapping>
          <filter-name>test</filter-name>
          <url-pattern>/*</url-pattern>
     </filter-mapping>

I have admin access to the main router in our LAN, so how can i telnet or get access to other LAN members in LAN without using third party software?

I have admin access to the main router in our LAN, so how can i telnet or get access to other LAN members in LAN without using third party software?
its linksys3500 router and i login as admin using the gateway address in address bar..
i want to access the c drive of my colleague in same subnet in same office and i know his ip address.but he not configured telnet accept request.so without it how can i open his telnet port and access him

Duplicate post.

I was online earlier this week and liked the forms with submit buttons and the Adobe site directed me to upgrade to Adobe PRO XI in order to use forms so I bought five licenses. Just had it installed today and it is now asking me to sign up for forms Cent

I was online earlier this week and liked the forms with submit buttons and the Adobe site directed me to upgrade to Adobe PRO XI in order to use forms so I bought five licenses. Just had it installed today and it is now asking me to sign up for forms Central in order to use this feature. What gives? The Adobe site gave me the impression that I would have this feature after purchasing the new upgrade. I would not have purchased the upgrade, let alone five of them had I know this. Am I missing something?

Acrobat XI comes with the Fromscentral AIR application and the ability to create PDF forms authored in Formscentral. To have more than the free (1 form with 50 responses) level account you need to sign up for a Formscentral subscription.
Andrew

I am experiencing network failures with my Airport Extremes: the main router is a 2nd Gen, the extension a 5th Gen. The 5th Gen keeps on losing connection with the main router. Any ideas why?

I am experiencing network failures with my Airport Extremes: the main router is a 2nd Gen, the extension a 5th Gen.
The 5th Gen keeps on losing connection with the main router and thus with the internet.
Any ideas why?

Is the second Extreme configured to "extend" the network created by the first? If so its position must be such that it has a strong wireless connection to the first Extreme. If it is at the limits of the first one's wireless range its connection will be tenuous. Place them closer together and determine if that makes a difference.

List all AD users with memberof

Hi I have got this script and it works fine, but I cant add the memberof groups for each user.
On Error Resume Next
Const ADS_SCOPE_SUBTREE = 2
Const ADS_UF_ACCOUNTDISABLE = &H0002
Const ADS_UF_PASSWD_NOTREQD = &H0020
Const ADS_UF_PASSWD_CANT_CHANGE = &H0040
Const ADS_UF_DONT_EXPIRE_PASSWD = &H10000
Const ADS_UF_SMARTCARD_REQUIRED = &H40000
'Set RootDSE
Set objRootDSE = GetObject("LDAP://rootDSE")
strDomain = objRootDSE.Get("defaultNamingContext")
strADPath = "LDAP://" & strDomain
'wscript.Echo strADPath
Set objDomain = GetObject(strADPath)
'wscript.echo "objDomain: " & objDomain.distinguishedName
Set objConnection = CreateObject("ADODB.Connection")
Set objCommand = CreateObject("ADODB.Command")
objConnection.Provider = "ADsDSOObject"
objConnection.Open "SAURON"
Set objCommand.ActiveConnection = objConnection
objCommand.Properties("Page Size") = 1000
objCommand.Properties("Searchscope") = ADS_SCOPE_SUBTREE
objCommand.CommandText = _
"SELECT Name, description, sAMAccountName, st, postalCode, co, l, profilePath, homeDrive, distinguishedName,userAccountControl FROM '"& strADPath &"' WHERE objectCategory='user'"
Set objRecordSet = objCommand.Execute
objRecordSet.MoveFirst
Set objFSO = CreateObject("scripting.filesystemobject")
Set logStream = objFSO.opentextfile("C:users\dom.adm.pa\desktop\domainusers.csv", 8, True)
logStream.writeline("Name,Description,sAMAccountName,st,postalCode,co,l,Account Disabled,Password Required,User Changable Password,Password Expires,Login Count,Last Login,Last Password Change,Created,Modified")
Do Until objRecordSet.EOF
strDN = objRecordset.Fields("distinguishedName").Value
Set objUser = GetObject ("LDAP://" & strDN)
If objRecordset.Fields("userAccountControl").Value AND ADS_UF_ACCOUNTDISABLE Then
Text = "Yes"
Else
Text = "No"
End If
If objRecordset.Fields("userAccountControl").Value AND ADS_UF_PASSWD_NOTREQD Then
Text = Text & ",No"
Else
Text = Text & ",Yes"
End If
If objRecordset.Fields("userAccountControl").Value AND ADS_PASSWORD_CANT_CHANGE Then
Text = Text & ",No"
Else
Text = Text & ",Yes"
End If
If objRecordset.Fields("userAccountControl").Value AND ADS_UF_DONT_EXPIRE_PASSWD Then
Text = Text & ",No"
Else
Text = Text & ",Yes"
End If
logStream.writeline(objRecordset.Fields("Name").Value & ","_
& objRecordset.Fields("description").Value & ","_
& objRecordset.Fields("sAMAccountName").Value & ","_
& objRecordset.Fields("st").Value & ","_
& objRecordset.Fields("postalCode").Value & ","_
& objRecordset.Fields("co").Value & ","_
& objRecordset.Fields("l").Value & ","_
& objUser.logonCount & ","_
& objUser.LastLogin & ","_
& objUser.PasswordLastChanged & ","_
& objUser.whenCreated & ","_
& objUser.whenChanged & ","_
Loop
logStream.Close

Are you looking for members:
1) in a specific group, or
2) list all users and all their direct groups, or
3) get a complete list of all groups a user is a memberof, to include nested?
I would recommend using Powershell. It's made for this type of thing. Some of the Cmdlets you can check are:
List all users with all groups:
Get-ADUser -filter * -properties memberof | select samaccountname,memberof
List all members of a group:
Get-ADGroupmember <groupname> -recursive
Get all groups a member is nested in:
Get-ADAccountAuthorizationGroup <username> | ft name
- Chris Ream -
**Remember, if you find a post that is helpful, or is the answer, please mark it appropriately.**

Same user with different access rights depending on internet or intranet

Hi gurus,
I'm faced with the following situation. Users are able to access our portal (EP7.0) via Intranet as well as via Internet. But via Internet the users shouldn't be able to access security critical content (sitting in an internet cafe and checking accurate BI reports wouldn't be a nice thing).
So, how can we achvieve this?.
- Dynamic role assignment? So after login we should determine internet/intranet (eg http header set by our reverse proxy).
- PCD filtering? In this case we need to set custom attributes on iViews for restricting internet access and then write an PCD filter.
Any other suggestions?
Thanks a lot

Hi,
R u using SAP Web Despatcher?
Then use URL Filtering and block the URL'S accessing from the internet in Web despatcher.
If the user is in intranet any way he can access because he will access the server directly without web-despatcher.
Thanks,
gopal

Giving List Permission to users with no access to the main site

Similar Messages

Maybe you are looking for