Invalid permissions in Document Library

Hello,
Somehow we managed to get invalid permissions in Document Libraries on our Sharepoint server.
Our Farm is a brand new 2-tier setup (1 server is database, 1 server is AD, IIS and Sharepoint itself).
We added users at the same time as we copied our data to sharepoint (through the Explorer).
We have a subsite for our "Production"-employees, each Employee will make products for a set of customers.
Each Customer has his own Document Library; this is where we put contracts, project-documents, designs, everything.
So, we have Document Libraries called something like "Customer A", "Customer B", "Customer C". "Employee 1" works for Customer B so he will get access to Document Library "Customer B". He does not work
for Customer A or C, so he does not get access to those. We have about 60 customers so we have about 60 Document Libraries.
After we configured this and everything was set up we got complaints that our Employees could see (in the App-Treeview) large sets of "Customer"-libraries that they shouldn't be able to access. If they would click on it, they get an error saying
"Sorry, this site hasn't been shared with you.". Also, other sites which should be invisible are indeed invisbile. I have a mix of valid and invalid sites.
So to continue the example: Employee can see 2 Document Libraries, "Customer A" and "Customer B", where I would expect he would only see "Customer B". "Customer C" is correctly hidden. When I look at the settings in
"Customer A" he has no access. But the customer is in the TreeView, nonetheless.
I went out to investigate. When I check permissions I can see the user indeed does not have any permissions. That is good.
I wrote some code (in C#, using Sharepoint.Client) and I found out that Document Libraries are working correctly (Customer C) only show "EmptyMask"-access for a user. And for sites that do NOT work correctly ("Customer A") I see the following
access:
EmptyMask
Open
BrowseUserInfo
UseClientIntegration
The "Open" permission would explain why the item is visible. It looks like these are inherited from the Site-settings (am I right?)
Now I don't know how to correct this situation.
I tried writing some code in C# that detects this invalid setup, but I can't find a way to only change these Permissions without creating new Security Roles and such. I don't want to create security roles.
I have googled for solutions, but I cannot find anyone with the same problem.
Anyone can give me one or more pointers?
Thanks in Advance!

Two points.
Are you logged in as an Admin or Site Owner? Security Trimming in things like Site Contents will act differently for Admins than it will for regular users
Enabling the checkbox you did in the document library should automatically add it to the Quick Launch unless you have custom edited the quick Launch. If you have then it takes the custom editing rather than the dynamic list created by the checkbox.
By default users will see the document libraries they have access to. The problem is that you've started customizing things and there is no easy way to get back to the default after you do.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

Similar Messages

Document Check in /Check out permissions in document library share point 2010

Hi ,
I have created a approval work flow for document templates library .I need to create a group to have upload,amend changes through check in and check out.The group which has all rights can upload documents and amend new changes which other groups
cannot do.Could any one tell me how to do this.

Hi .NET User,
According to your description, my understanding is that you want to create a group that allows user upload document through check in and check out.
I suggest you can create a group with contribute permission level to achieve it.
More information for your reference:
https://support.office.com/en-US/Article/Default-permission-levels-bb671e91-77aa-4aa0-a28e-7ffd3523d32d?ui=en-US&rs=en-US&ad=US
https://answers.uchicago.edu/32617
http://office.microsoft.com/en-001/sharepoint-server-help/edit-create-and-delete-permission-levels-HA101805381.aspx
Best Regards
Zhengyu Guo
TechNet Community Support

PPS Error in "IBIMonitoringAuthoring " You do not have permissions to create a data source in this document library.

Hi,
I am trying to use "IBIMonitoringAuthoring" in my local web site.
But i am getting error like "Server was unable to process request. ---> You do not have permissions to create a data source in this document library. Additional details have been logged for your administrator."
My code is below,
string url = ServerName + webServiceUrl;
IBIMonitoringAuthoring biService = BIMonitoringAuthoringServiceProxy.CreateInstance(url);
//Create data source object
DataSource dataCube = new DataSource("AW_Data_Cube");
dataCube.Name.Text = "AW_Data_Cube";
dataCube.ServerName = "SQL2008dev";
dataCube.DatabaseName = "Analysis Services Project1";
dataCube.CubeName = "TestCube";
dataCube.ConnectionContext = ConnectionContext.ConnectAsSharedUser;
dataCube.FormattingDimensionName = "Measures";
dataCube.MinutesToCache = 10;
dataCube.CustomTimeIntelligenceSettings = "";
biService.CreateDataSource(connectionListUrl, dataCube);
How could i authenticate the Service. Is there any way to pass credentials for this method?
Thanks & Regards
Poomani Sankaran

I suffered similar issue in Infopath, and i finally solved the issue by changing the data connection URL, it should the same as the Infopath publish location.
for example: SP server iP 192.168.1.1 have two name, hostname is mySP, alternate assces mapping name is companySP, and you can access the websit by both
http://mySP and
http://companySP
hope it can help someone..

How do document permissions differ from its document library and a content roll-up webpart?

I have an excel spreadsheet (a group schedule), in a document folder, on a page that only IT management can see/access/edit, in a site that all IT group members have access to.
for example: http://IT Group site/IT Management Page/Schedule/2015.xlsx
On the group's homepage, I have a content roll-up web part that displays all document library contents in the group site.
IT management consists of 3 people. They can all edit the spreadsheet from the original location, but when they access the document from the content roll-up web part on the group's homepage, they cannot save any changes.
Accessing the file from here: http://IT Group site - content roll-up web part link "2015.xlsx" points to "IT Group site/IT Management Page/Schedule/2015.xlsx"
The error received says "'http://IT Group site/IT Management Page/Schedule/2015.xlsx' is read-only. To save a copy, click OK, then give the workbook a new name in the Save As dialog box."
Where would the permission issue be?
As the SharePoint site owner, I can access the file without any problems saving from either location. Also, I created an IT Management group that has full control over the IT Group site/IT Management Page, and full control over the IT Group site.
Thanks for any info you can share.
Stephanie

Thanks Cameron -
I have no special settings on the document library where the schedule is saved. No content approval necessary or different permissions. The library is set to open documents in client application, and check-in, check out is not activated.
I have logged in to one of their computers. They can access the spreadsheet directly from the document library and make changes freely, and save that version directly to the server, but not from any web parts. Just to test, I created a summary link web part
on the same page that lists the document library, created a link to the file, and the file opens, but they cannot save any changes without renaming the file. The only place they can truly edit the spreadsheet without renaming is from the document library
directly.

SharePoint 2013 Document Library/List created from template "not keeping unique permissions"

Hi all,
I am in need of help with SP2013 Document Library. Hope someone will be able to help me. Here is the scenario.
I created a SP2013 document Library/List , I break the permissions of the list from the parent and apply unique permissions to the list. So far so good. But now when I Save the list as template and create a new list using that template , the unique permissions
are lost and the list is again shown "inheriting from parent". I have tested this scenario in recently upgraded farm and a completely new farm as well. I tried creating templates in powershell as well but same results. Is this only with me or anyone
else experiencing this and if there any workarounds?
Any help is appreciated.
Thanks,
Kshma

List template will not save permission neither will carry it in newly create instance, for a good reason. You need to use powershell or UI
Please 'propose as answer' if it helped you, also 'vote helpful' if you like this reply.

SharePoint 2013 document library, permissions to upload and view shared document only

SharePoint 2013 document library I want to give access to client where they can upload and view their uploaded document and can see all documents shared with them.
I have managed to show all document shared with them only by deactivating a feature but now they can't upload any document, If I create a permission set to allow them to upload documents, they will see all other documents as well which are not shared with them.
Any suggestions?

Hi Sharaqat, the best way to handle your situation is to have a separate library or site for the client. You could use item level permissions per Thilosh, but fine-grained permissions become a major headache. You could also use web parts and audience
targeting, but that's not truly secure.
cameron rautmann
I am thinking to have a separate document library for client, where they can upload/view/edit etc, we will upload documents in a "secure" library with a column saying this is a private document or public document, if we mark a document public,
a workflow will move that document to the client's document library. I don't think there would be a problem to move a document from 1 library to another in a workflow.
That's the easiest solution I have found so far.

Sharepoint 2013 / Office 365 Document library item level permissions problem

Hello,
I'm looking for a solution to enable users to upload documents to a document library, the ability to view other documents uploaded to the same document library, but able to edit or delete those other documents.
With a list you can use Item-Level security in Advanced Settings but this is not available for Document libraries. I could use workflows to assign individual permissions to document, but the the library already contains over 2,000 documents and will continue
to expand so I don't like the idea of having that many individual permissions set.
Are there any 3rd party plug-ins or solutions to this issue?
Thanks,

Try below:
http://www.hersheytech.com/Blog/SharePoint/tabid/197/entryid/28/Default.aspx
As it turns out the, setting Item-Level Permissions in a library is fully supported with PowerShell!
The PowerShell commands for changing this are very simple:
$web = Get-SPWeb http://YourSite/
$list = $web.Lists[“Your Document Library Name”]
$list.ReadSecurity = 2
$list.Update()
$web.Dispose()
Note the 3rd line which is where you determine the value for this setting using the following values:
1 = “Read all items”
2 = “Read items that were created by the user”
If you wish to modify the values for Create and Edit access instead, replace .ReadSecurity with .WriteSecurity with
the following values:
1 = “Create and edit All items”
2 = “Create items and edit items that were created by the user”
4 = “None”
For example:
$web = Get-SPWeb http://YourSite/
$list = $web.Lists[“Your Document Library Name”]
$list.WriteSecurity = 2
$list.Update()
$web.Dispose()
Also check
http://sppermissions.codeplex.com/
If this helped you resolve your issue, please mark it Answered. You can reach me through http://freeit-support.com/

Item Level permissions document library

In SharePoint 2010 you could apply item level permissions to document libraries via PowerShell with
$web= Get-SPOSite "sitename"
$list = $web.Lists[“Listname”]
$list.ReadSecurity = 2
$list.Update()
$web.Dispose()
Is there a way to apply this to SharePoint online 2013? it doesn't seem to work.

Hi SpNerd,
For SharePoint 2013 Online, there is not a comdlet that is used to get a site. So, it seems that there is not a way to change Item-level permissions via PowerShell for SharePoint Online.
Windows PowerShell for SharePoint Online cmdlets
http://technet.microsoft.com/en-us/library/fp161364(v=office.15).aspx
As a workaround, you can change Item-level permissions via SharePoint Online UI as List Settings->Advanced Settings->Item-level Permissions.
I hope this helps.
Thanks,
Wendy
Wendy Li
TechNet Community Support

Document library not automatically inherit permissions from parent

Hi all,
Whenever I create a new document library the inherit permissions not automatically set for this library, So I have to click Inherit permissions for each time i create a new document library. please
help to apply inherit permissions automatically whenever new library create.
Manikandan

Hi Alex,
when you create a library and then go to the permissions settings for it it's set to not inherit permissions?
Ans : It Does not have any inherited permissions from the parent site.
Does it have a copy of the standard permissions set? If not what does it have and what is it missing from the site default?
Ans : No. Empty permissions.
But whenever i stop and start apply inherited permissions on the parent site works fine (I mean apply to all document library). but i could not do it all time whenever the new library create. I hope whenever the permissions changes on the parent site may
affect the document lib permissions. pls help how to proceed ?
Manikandan

Document Library Template with Permissions

I need to create like more than 50 document libraries that contain the same folder structure and the same permissions its posible to create some kind of template that include permissions or some kind of automation?

Hi,
According to your post, my understanding is that you wanted to create more than 50 document libraries that contain the same folder structure and the same permissions.
First, you need to create a document library that contain the folder structure and the special permissions.
Then you need to make sure that you want to the libraries have same name or not.
If the libraries have different names, we need to store the names in a database first.
The solution is:
storing the names in a text file database(or other location such as sql server)
Receive the names from the database, and then create the libraries.
Here is a similar thread for you to take a look at:
http://social.msdn.microsoft.com/Forums/silverlight/en-US/2ed1c9ab-ace2-47a8-8556-553119a63583/bulk-create-records-or-document-libraries-via-powershell
Best Regards,
Linda Li
Linda Li
TechNet Community Support

MOSS 2007 : Personal Document Library Permissions gone automatically

Hi All,
I am using SharePoint version moss 2007. But yesterday permissions for personal document library has disappears and all other users not able to access their folders from same library then I had go back and given permissions manually.
Can anyone tell me what was the cause for that?
Thanks in advance....

a) Having 500GB data in one single content database inj the MOSS 2007 environment does it impacts
the site performance?
Inder: Yes, it will impact site performance at large extended, recommended is 200 gb only. Check it IO of your disk to analyze performance issue
b) Migrating the site collection as is onto single content database (all 500 GB into one content
database) into destination SharePoint 2013, does it will be a good practice? Hope SharePoint 2013 content database limit is 200 GB, hence moving 500GB as is into one database will it be good practice?
Inder:
Content database size (all usage scenarios)
4 TB per content database
Supported
Content databases of up to 4 TB are supported when the following requirements are met:
Disk sub-system performance of 0.25 IOPs per GB. 2 IOPs per GB is recommended for optimal performance.
You must have developed plans for high availability, disaster recovery, future capacity, and performance testing.
http://technet.microsoft.com/en-us/library/cc262787%28v=office.15%29.aspx#ContentDB
c) Does database attach and detach works for the databases which are of size 500GB?
Inder: Yes it does work
d) Can we do database attach and detach directly from MOSS 2007 to directly onto SharePoint 2013, without
hopping onto SharePoint 2010 in between and then later to SharePoint 2013?
Inder: No, you need to pass through 2010 and then 2013
e) If moving 500GB data into one content database will not be a good approach, can we split it onto
multiple databases?
Inder: you can go with 500 gb
f) If database attach and detach doesn’t help for databases which are of size 500GB, should we go for
any tool based approach? If yes, which tool does best fit
Inder: Below are few tools you can try
http://www.metalogix.com/Products/Content-Matrix.aspx
http://en.share-gate.com/
http://www.avepoint.com/sharepoint-migration-tools/
http://www.quest.com/sharepoint/migration.aspx
If this helped you resolve your issue, please mark it Answered

Users cannot access Document Library althouth they have Edit permissions

Hello,
I have a strange SharePoint 2013 case, or at least it's strange to me.
Users from the company cannot access a Document Library although I've granted them Edit permissions. The Inheritance from the parent have been broken, all inherited groups have been removed and all users have unique permissions to this library. Here is the
setup:
Web App -> Sub Site A -> Sub Site B -> Sub Site C -> Sub Site D -> Library
So these users have Read access from the Web App down to Sub Site B. They cannot see Sub Site C and D because these sites are also with broken inheritance and unique permissions. But I've granted Edit permissions for these users to the Library.
If I assign View permissions for these users to the Sub Site D then they can upload and edit documents in the library, but still cannot see Sub Site C which was my intention anyway. Again i don't want them to see Sub Site D either, but if i remove the View
permissions they can't access the library.
On SP 2010 this was not an issue. I'm not sure if here the permissions are different or not, but I've never seen such issue before.
Any ideas will be much appreciated. I hope the explanation is good enough to describe the issue.
Many Thanks in advance.
Ivo

Hi Ivaylo,
According to your description, my understanding is that the user with only Edit permission on the library cannot access the library.
I recommend to check if the Limited-access user permission lockdown mode feature is deactivated in root site.
If it is not, deactivate it and then test to see if the issue still occurs.
To deactivate the feature, please go to the root site > Site Settings > Site collection features > deactivate Limited-access user permission lockdown mode.
Best regards.
Thanks
Victoria Xia
TechNet Community Support

How to add User Permissions to form created in InfoPath 2010 created for SharePoint document Library

Hi,
I created a form in InfoPath 2010 with three views (one for user input, the other two views to be used by supervisors) and published this to a SharePoint 2010 document library. Now the way this form is supposed to work is that when a User goes to the document
library and adds a document, it is supposed to open the Form with the User's input view. When the User submits the document, only him/her should be able to open and possibly edit the the form. When the Immediate Supervisor opens the form, it should open in
the Supervisors view and allow them to fill in only their section and not be able to edit or alter the user's data. When the Immediate Supervisor saves the document, the Over-all Supervisor should be able to open it in their view and not be able to edit or
alter the sections filled out by the User and Immediate Supervisor.
How would i go about completing this? I have the views created but now have the problem of associating these views with their respective users or groups.

Hello,
You need to first create user group in sharepoint site then add user in group according to their role. Later you need to call usergroup.asmx web service to get current logged-In user group name so you can switch view and also apply rule for editing or disabling
controls in form.
Follow this link to get group name:
http://social.technet.microsoft.com/wiki/contents/articles/13271.sharepoint-2010-extracting-user-group-of-current-login-user-in-infopath-2010.aspx
http://social.msdn.microsoft.com/Forums/en-US/018f5184-5c83-4a53-b66b-8c376fc800fc/how-to-get-current-users-sharepoint-group-name-sharepoint-2010-infopath-2010
To apply rule on control:
http://office.microsoft.com/en-in/infopath-help/add-rules-for-performing-other-actions-HA101783373.aspx
Hope it could help
Hemendra:Yesterday is just a memory,Tomorrow we may never see
Please remember to mark the replies as answers if they help and unmark them if they provide no help

What permissions does a user need to be able to access a document library's workflow settings menu?

A group has created some out of the box SP 2010 workflows in a standard document library.
Some users have the "Workflow Settings" icon available to click on, but other staff only see a grayed out icon.
I have been trying to determine what change is needed to a user's access to the library so that they can add or access workflows.
Thank you

I believe it is the "Manage Lists" permission that they need. Owners and Designers permission levels have this by default.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

How to Get Choices as a Dropdown from a different Column for the same Item In a Document Library?

Hello All,
I was trying to see if there is any way that we can get the choices for a Field from another filed in the same item in a Document Library.
To be specific.
I have Created a Project Document Set, Which has a Column called "Project Members" where all the members will be listed. This will be inherited to all the documents in that Project Document Set. This is used to grant Permission using Workflow.
I also have "Document Members" Column(This is only for Documents) who will be given Edit permissions to that Document using a Workflow. This can be any type of column(choice, People or Group etc) As long as I can select multiple values.
I am looking for a way to get the "Project Members"(Values or Users) as choices for "Document Members". I know this is possible in the List as you can customize in the InfoPath Form. But not sure in the Document Library.
Document Members can only be the members from the Project Members, In order to grant granular Permissions for the project And Documents using a Workflow
Document Library
Project Document Set Name
File Name
Project Members
Document Members
Project A
User1;User2;User3
Doc1
User1;User2;User4
User1;
Doc2
User1;User2;User5
User1;User2;
Doc3
User1;User2;User6
User1;User2;User3;
Project B
User5;User6;User7;
Doc1
User5;User6;User7;
User7;User5
Doc2
User5;User6;User7;
User7;User5
Doc3
User5;User6;User7;
User5;User6;User7;
Thanks for your time.

>
Jenny Karunakaran wrote:
> Hi Jung,
>
> Thanks for the reply. But I dont know how to assign value set to this attribute(i.e. Context atribute to which filter value property is bound). Can I use a supply function for this ?
>
>
> Regards,
> Jenny
No. A value set and a supply function are two completely different things. You use this Context API to populate the value set for an attribute:
IF_WD_CONTEXT_NODE_INFO=>SET_ATTRIBUTE_VALUE_SET
Value Sets are also how ByKey UI elements (like the DropDownByKey) are built. Here is a help document that discusses value sets - but in the context of the ByKey UI elements. The process is the same for creating the value set however:
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/bb/69b441b0133531e10000000a155106/frameset.htm

Invalid permissions in Document Library

Similar Messages

Maybe you are looking for