Item based security on List

Question

Hi,
I have a list with 3 columns
Column Name| Column Type
Employee | Person/Group
First Name | Single Line Text
Last Name | Single Line Text
As the Employee column is of type "Person/Group", I want to apply item based security on this list. For example if Person A is logged in, he MUST NOT be able to update record of others, But yes, he should have rights to update his own Row (Item).
Please let me know how can i achieve such item based security in list ?

Answer 1

Hi,
From your description, I know you want to restrict users to edit items when he is the owner of current item.
You can try these codes below:
using System;
using System.ComponentModel;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using Microsoft.SharePoint;
using Microsoft.SharePoint.WebControls;
namespace VisualWebPartProject1.VisualWebPart1
[ToolboxItemAttribute(false)]
public partial class VisualWebPart1 : WebPart
// Uncomment the following SecurityPermission attribute only when doing Performance Profiling using
// the Instrumentation method, and then remove the SecurityPermission attribute when the code is ready
// for production. Because the SecurityPermission attribute bypasses the security check for callers of
// your constructor, it's not recommended for production purposes.
// [System.Security.Permissions.SecurityPermission(System.Security.Permissions.SecurityAction.Assert, UnmanagedCode = true)]
public VisualWebPart1()
protected override void OnInit(EventArgs e)
base.OnInit(e);
InitializeControl();
protected void Page_Load(object sender, EventArgs e)
SPSecurity.RunWithElevatedPrivileges(delegate()
SPWeb currentWeb = SPContext.Current.Web;
String currentUserName = currentWeb.CurrentUser.LoginName;
SPSite site = new SPSite("http://sp/sites/sharepoint2013");
SPWeb web = site.OpenWeb();
SPList list = web.Lists["ListA"];
web.AllowUnsafeUpdates = true;
foreach (SPListItem item in list.Items)
string username = GetUser(item, item.Fields["Employee"]).LoginName;
//break from parent permissions
item.BreakRoleInheritance(false);
//delete any existing permissions in the
//case that this is an update to an item
SPRoleAssignmentCollection currentRoles = item.RoleAssignments;
foreach (SPRoleAssignment role in currentRoles)
role.RoleDefinitionBindings.RemoveAll();
role.Update();
if (username.Equals(currentUserName))
//create"contributor" role
SPRoleDefinition roleDef = web.RoleDefinitions.GetByType(SPRoleType.Contributor);
SPRoleAssignment roleAssignment =
new SPRoleAssignment(
currentUserName,
string.Empty,
string.Empty,
string.Empty);
roleAssignment.RoleDefinitionBindings.Add(roleDef);
//update list item with new assignment
currentRoles.Add(roleAssignment);
item.SystemUpdate();
else
//create"reader" role
SPRoleDefinition roleDef = web.RoleDefinitions.GetByType(SPRoleType.Reader);
SPRoleAssignment roleAssignment =
new SPRoleAssignment(
currentUserName,
string.Empty,
string.Empty,
string.Empty);
roleAssignment.RoleDefinitionBindings.Add(roleDef);
//update list item with new assignment
currentRoles.Add(roleAssignment);
item.SystemUpdate();
private SPUser GetUser(SPListItem item, SPField userField)
string currentValue = item[userField.Title].ToString();
SPFieldUser field = (SPFieldUser)userField;
SPFieldUserValue fieldValue = (SPFieldUserValue)field.GetFieldValue(currentValue);
return fieldValue.User;
The screenshot below is my result:
Vincent Han
TechNet Community Support