Granting access to SharePoint Designer on a SubSite but not the Site Collection

Is it safe in SharePoint 2010 to give a user the ability to use SharePoint Designer on a SubSite of a Site Collection and not give them permission, other than Visitor access, to the root Site Collection (Parent Site collection)?
Most importantly, I want to make sure the only damage a user can do is to their own subsite, and not do anything that will impact the Site Collection.
I created a test user and granted it FULL access on a test subsite and only view on the parent site collection and was able to use designer logged in as the test user. I was able to modify the subsite pages and create workflow. I was not expecting
this to work based on the following statement in KB article
http://support.microsoft.com/kb/2592376
Overall, an user needs to be a member of one of the following groups at the site collection
level to be able to use SharePoint Designer and modify SharePoint content:
- Site Collection Administrators
- Designers
- Owners
Does anyone have any advice on this?
Thanks!

I think I just found out why in SharePoint 2010 I'm able to give a user "Designer" permissions on a subsite and "Read" only permission on the parent Site Collection root site and they can still use SharePoint Designer with
no permission issues in the subsite.
http://suehernandez.wordpress.com/2013/02/15/sharepoint-designer-2010-you-do-not-have-permission-to-do-this-operation/
From the Article: "Turns out the reason for these varying behaviors is this: In 2007, new sites would automatically inherit their
master pages from their parents. If you made no changes to that, it inherited right up to the top. So it’s looking at the master page from the top, in those circumstances. And as we’ve seen here, if you don’t have Design permissions to it,
it doesn’t work.
In the case of a new 2010 site (just a regular Team Site), the new 2010 behavior is to use the Master Page in the gallery it has in its own site. And since the user is an Administrator (Full Control) of that
site, then no problem getting to the Master Page!"
Does anyone have any experience with this?

Similar Messages

SP2013: Can a subsite owner block the site collection owner?

I read some discussion telling me Sharepoint allow subsite owner can block parent site owner. But in my test, the Site Collection owner ALWAYS have FULL PERMISSION on subsite. Is it true?
I have tested in my farm. I login as one Site collection owner (A), create a subsite, then break the subsite permission inheritance. Assign someone (B) as subsite owner. Then I login as the subsite owner (B). Remove everyone but me (B) in the subsite
permission lists.
However, the SC owner (A) can still change the permission for this subsite. I use "check permission" to check against A. A have every permission although he is not belong to any permission group or permission level. Is it default behaviour?

It is true, you can't block or reduce the permissions assigned to the site collection owner.

Site not found using Sharepoint Designer 2013, Load balance URL and the Front end servers.

Dears,
My SharePoint farm is with the below configuration in our office :
Batch processing server the with Central Administration
Web Front End Sever 1 (http://wfe01)
Web Front End Sever 2 (http://wfe02)
I do have the load balance URL as http://finance.mycompany.com and as per the system administrator it seems configured properly.
In AAM i have mapped the URLs as below for the web application in Central Administration portal:
http://finance.mycompany.com - Default Zone
http://wfe01 - Intranet Zone
http://wfe02 - Internet Zone
I was able to browse the site via the load balance URL : http://finance.mycompany.com, but couldn't open the site using the Share Point Designer 2013. It always says the site not found.
please advise,
thanks,
Ammar

What do the wfe01 and wfe02 aams do?
Are you browsing to the SharePoint site and using SPD on the same computer, is it part of the farm or a seperate client computer?
thanks Alex a lot for your response and appreciate the same.
WFE01, WFE01 is connected to the one central admin on Batch Processing Server (central admin URL is http://SharepointCA:5555 and the SharePoint Web Application is hosted under port 80 on the same server). So the AAM configured on the batch processing server
central admin.
I can connect to the site using the SPD inside the Batch Processing server if i mention the site urs as http://localhost. But not from other client computers by putting the load balance URL - http://finance.mycompany.com.
I can browse the sites directly putting http://wfe01, http://wfe02 and as well as the load balance URL (http://finance.mycompany.com). The custom webparts are getting crashed when i put the web application URL as http://finance.mycompany.com.
thanks,
Ammar

When I access my website by cellphone, my desktop design format is displayed, and not the cellphone format which I designed. What can I do?

When I access my website by cellphone, my desktop design format is displayed, and not the cellphone format which I designed. What can I do?

Hi
In Muse, go to File menu-> Site properties, select Phone layout and make sure the option in given screenshot is checked,
Do let me know if you have any question.

User has contribute access but he is not able to access the site collection...

User has contribute access but he is not able to access the site collection...

What error does he get.
Can you share fiddler trace(check if any 404 error)
what error do we see in ULS Logs
Create disableloopback
registry on server
http://support.microsoft.com/kb/926642/en-us

On imac 10.6.8 using current version of Aperture. How can I access the Aperture Library on my external hard drive that I use with time machine for backup? I can only access the application but not the library..

On imac 10.6.8 using current version of Aperture. How can I access the Aperture Library on my external hard drive that I use with time machine for backup? I can only access the application but not the library..

Go into Time Machine (the program not the bundle on the extrnal disk) and using Time Machine's browser go to the Folder where the library lives. You could look in the library bundle in Time Machine but that won't really tell you much,
If you want to make sure it truely has backed up your library you will need to restore it and open the restored library with Aperture.
If all this still has you confused you need to read up on Time Machine in order to get a feel for how it works, for what it is doing and for how to restore files from it.

How can i add a special user to the "site collection administrators" of the personal site on sharepoint online when the personal site is creating ?

when a new personal site is created on the sharepoint online 2013， then the administrator of this personal site will be himself. we can add another person to the "site collection administrators", then this person have full control of this personal
site.
but my request is : add this personal to the personal site when the personal site is creating, but not after the personal site has created ?
Is anybody know how to do that?

Hi,
According to your post, my understanding is that you want to add a special user to the "site collection administrators" of the personal site on sharepoint online when the personal site is creating.
Per my knowledge,
there is no out of the box way to accomplish this with SharePoint.
This is a forum which is supported for SharePoint On-Premise.
Regarding SharePoint Online, for quick and accurate answers to your questions, it is recommended that you initial a new thread in Office 365 forum.
Office 365 forum
http://community.office365.com/en-us/forums/default.aspx
Thanks,
Linda Li
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Linda Li
TechNet Community Support

TS1424 i can access my library but not the store. it says i'm signed in but page is blank. i've got an unkown error code -1202. please help.

I can access my libray but not the store. It says I'm signed in but the page is blank. I get an unknown error code -1202. I tried redownloading iTunes but that didn't work. My firewalls show that iTunes is allowed. Please help.

I can access my libray but not the store. It says I'm signed in but the page is blank. I get an unknown error code -1202. I tried redownloading iTunes but that didn't work. My firewalls show that iTunes is allowed. Please help.

My PC is connected to my airport by Ethernet. I can connect to the network, but not the internet. My wireless devices can access the internet

My PC is connected to AirPort Extreme by ethernet, I can access the network, but not the internet. The wireless devices on the extreme can access the internet

Hey DM,
Is the Wireless(WL) router signal coming through the wired-router?
My ISP requires that my Wireless Router is identified from their end. I use AirPort Express, so they need its MAC address from the router. Without that, my network will show up, but my ISP doesn't recognize it and won't allow it to route he internet. I don't know your exact situation though.
Can other wireless computers access the internet? If they can through the WL router, then it might be the MacBook. If they can't, then you might want to contact your ISP and ask if they can see your wireless router?
Let us know.
Adam

I attached my HDMI cable to my Samsung Tv. The "classic" apple screen comes up, but not the screen on my MacBook. Therefore I can't access my laptop.

I attached my HDMI cable to my Samsung Tv. The "classic" apple screen comes up, but not the screen on my MacBook. Therefore I can't access my laptop.

You have the display set in Extended Desktop mode with the MacBook as the main screen. The Menu Bar and Dock will be on the MacBook display and your background screen on the TV but you can move the cursor onto the TV screen.
In System Preferences>Display on the MacBook screen there should be an Arrangement tab when you have the MacBook hooked up to the TV and both screens working. When you click the Arrangement tab do you see two monitors side by side? One of them will have a Menu Bar at the top. Just click on the Menu Bar and drag it to the second monitor. That will make the second monitor your main screen.
The TV will now have the Dock and Menu Bar and windows will open on it. But you can move the cursor to the MacBook screen and move windows from the TV over to the MacBook screen.
You can now use your MacBook in Clamshell Mode with a wired or Bluetooth keyboard and mouse. http://support.apple.com/kb/HT3131 When you disconnect from the TV your Menu Bar will automatically change back to the MacBook.
Or if you want to work on the MacBook screen while showing it on a TV you can check the Mirror Display box on the lower left hand side of the Arrangement tab under the two monitors box. That will give you the same screen at the same resolution on both the MacBook and the external monitor.

The SharePoint Server Publishing Infrastructure feature must be activated at the site collection level before the Publishing feature can be activated.

Hi All,
I am trying to activate the Publishing feature for a SharePoint website using a custom Site Definition File. The problem I am getting
is when I try to use the custom site template I get an error message:
New-SPSite : The SharePoint Server Publishing Infrastructure feature must be activated at the site collection level before the Publishing feature can be activated.
The custom
Site Definition File snippet is show below:
<?xml
version="1.0"
encoding="utf-8"?>
<Project
Title="SiteDefinition1"
Revision="2"
ListDir=""
xmlns:ows="Microsoft
SharePoint"
xmlns="http://schemas.microsoft.com/sharepoint/">
<NavBars>
</NavBars>
<Configurations>
    <Configuration
ID="0"
Name="SiteDefinitionDelegateControls2">
      <Lists/>
      <SiteFeatures>
        
        <Feature
ID="{3bae86a2-776d-499d-9db8-fa4cdc7884f8}"
Name="FeatureDefinition/15/3bae86a2-776d-499d-9db8-fa4cdc7884f8"
/>
        
        <Feature
ID="{a392da98-270b-4e85-9769-04c0fde267aa}"
Name="FeatureDefinition/15/a392da98-270b-4e85-9769-04c0fde267aa"
/>
      ...Other Site Features
      </SiteFeatures>
     <WebFeatures>
        
     <Feature
ID="{94c94ca6-b32f-4da9-a9e3-1f3d343d7ecb}"
Name="FeatureDefinition/15/94c94ca6-b32f-4da9-a9e3-1f3d343d7ecb"/>
     ... Other Web Features
      </WebFeatures>
      <Modules>
        <Module
Name="DefaultBlank"
/>
      </Modules>
    </Configuration>
</Configurations>
<Modules>
    <Module
Name="DefaultBlank"
Url=""
Path="">
      <File
Url="default.aspx">
      </File>
    </Module>
</Modules>
</Project>
I hope you can help
Colin

As the error says. The Publishing Infrastructure feature must be activated at the Site Collection level where you are creating a new site PRIOR to turning on the Publishing feature. So if you are trying to use this site definition to create a
new Site Collection then its not going to work. If you are trying to create a sub site then make sure that Publishing Infrastructure is enabled in the site collection before trying to create a sub site with this site definition.
Internally Microsoft does this for the Publishing Portals using custom code. Here's an article that discusses how to do it in SharePoint 2010.
http://msdn.microsoft.com/en-us/library/office/gg615465(v=office.14).aspx
Compare what's in the article to one of the Publishing templates available out of the box in 2013 and you should be able to find the assembly that is used to load the Publishing features.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

Check User Can Access the site collection Are Not?

Hi All
I have some requirement to check user can access site are not through powershell?
Recently we done migration from 2010 to 2013 SP after that i got some problem some users can not access site but this user have permission in sp 2010 site .
Regarding this i need to check specific user can loing or Access the site collection are not. using powershell
Some one said impersonate user we can check user can open the web are not but i don't know this impersonate.
Please help me guys....

Hi,
You can check the permission for specific user with powershell. Here is the link. Hope this will help.

How to grant access to sharepoint for the user from different Domain

Hi All
I need to grant access to user from different domain.
Where I can able to view the users in people picker (different domain).
Thanks in Advance.
Raj

Hi
Trevor Seward
Sorry to disturb
you again.
I am trying to restrict user from search from other domain, say we have domain A and Domain B, where I am trying to restrict all the user from domain B (Search users)for a site collection. I have found couple of stsadmin command to do so. but none
of them works. Below are the commands I have tried
STSADM.exe -o setproperty -pn peoplepicker-searchadforests -pv "domain:<Name>.domain" -url "http://Site URL"
stsadm -o setproperty -pn peoplepicker-searchadcustomquery -pv “(canonicalName=<Name>.domain*)” -url "Site URL"
we have two way trust.
Can you suggest any solution.
Thanks
Raj

SharePoint Logo URL on SubSites linking to Top Site

Hi All,
Is there a way (out of the box, too) of making all the SharePoint Logos on all SubSites bring the User back to the upper-most top site in the collection, instead of bringing the User back to the subsite home?
Regards
Zuke
zuke collins

This would require editing the masterpage to change where the value of that link is being pulled from. Its very possible, but there is no way to do it that I am aware of without editing the master page.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

SharePoint 2013 SIP Address has no value in site collection for users

I have SharePoint 2013 site collection and I gave access to particular user design access. When I check the user information i do not have any value of that users SIP field. In that domain I am having exchange mail server and LYNC 2010 server. Please help
me on this issue.

SIP value exist in AD.
i check user profile service and edit for user, in that SIP value is exists.
But when i go to Site Action - > site setting -> People and group
then i am not able to find SIP value for the users.
when i delete user from the site users and re-add user then SIP value is coming. but that's nit feasible because i have around 150 sites.
Please give me solution or should i make the tool which will update user SIP value for all the sites?
Coz of SIP value when i add site users web part then status is not showing for the user in the web parts.

Granting access to SharePoint Designer on a SubSite but not the Site Collection

Similar Messages

Maybe you are looking for