KM repository permissions: Full Control vs. Read

Hi,
When I assign permissions on a KM folder to a group or a role, it get's default "Full Control". Afterwards you can change this to "Read" or any of the other options.
QUESTION: Is it possible to change this so that default "Read" permission is assigned instead of "Full Control"? If yes, where? how?
Kind Regards
Edmond Paulussen
Edited by: Edmond Paulussen on Apr 14, 2011 10:01 AM

Hi Manish,
When you give the content_admin role to the user with read access it overrides the permissions set in the repository.
Best possible solution is a combination of two earlier replies.
1)Create a NAvigation View of your Repository.
2)Add that to a role and assign that role to the user.
I have implemented this in my solution and it is working fine.
Creating the navigation iview will give you the liberty to modify layout as per user/role.
Please revert back in case of any issues.
Regards,
Sumit

Similar Messages

Read/Write vs Full Control on KM folders/files

I've read some docs on what Read/Write vs Full Control permissions mean when setting permissions for users/groups for folders and files. But I'm still somewhat confused.
What exactly does the 'Write' mean in Read/Write. Does Write mean a user can:
Create a new folder
Create a new file
Modify an existing file
Delete a file
Delete a folder
When you use the pull down for setting permissions, you see: Full Control, Read/Write, Read, Write and Delete. Kind of confusing. And you can only select one of them.
Any clarification on these permissions would be greatly appreciated. Or pointing me to some good documentation.
Thanks in advance. Ron

Access authorizations
Read
Permission to display items.
Write
Permission to change items but not to display them.
In folders, this permission also allows users to create items.
Read/Write
Permission to display and change items.
In folders, this permission also allows users to create items.
Delete
To delete an item, you require delete permission (or full control) for this item and write permission for the superordinate folder.
Full Control
This permission contains all other permissions.

KM repository permissions

Hi all,
I have created my own file repository with security manager ACL sesurity manager.i have given the permissions according to SAP Note 599425.
But when I am creating a user with content admin ,and giving permissions for my document as READ.Then also that user has the Full control on the document.Its not following the permissions set in KM content -permissions-details.
Any help will be appreciated .
Thanks in advance.

Hi Manish,
When you give the content_admin role to the user with read access it overrides the permissions set in the repository.
Best possible solution is a combination of two earlier replies.
1)Create a NAvigation View of your Repository.
2)Add that to a role and assign that role to the user.
I have implemented this in my solution and it is working fine.
Creating the navigation iview will give you the liberty to modify layout as per user/role.
Please revert back in case of any issues.
Regards,
Sumit

Error on creating a subsite from custom template with full control

I have a site collection and a subsites A and B on it, there is a group 'Managers' that has Read permissions on
site A. This group has Full control permissions on site B, and I have a solution with custom site definition, lists and feature event receiver that breaks permissions for certain list and sets Read permissions for group 'Visitors'. This list
is being created when site was created by my custom site definition. But when I try to create a site from this template I get 'Access denied'. I checked logs, and they say that site was created, every method in my receiver is executed without errors
but later I see messages about deleting this site. But if I am a
site collection admin everything works. And another fact is that if I create site without activating feature with event receiver and after creating site I
manually activate the feature everything works fine. Any ideas?

Hi,
For a better troubleshooting, I suggest to do as follows:
1. Rescope your features so that web application related activity are performed by a web application scoped feature.
2. Disable the security setting via PowerShell or a console app.
function Set-RemoteAdministratorAccessDenied-False()
[System.Reflection.Assembly]::LoadWithPartialName("Microsoft.SharePoint") > $null
[System.Reflection.Assembly]::LoadWithPartialName("Microsoft.SharePoint.Administration") > $null
# get content web service
$contentService = [Microsoft.SharePoint.Administration.SPWebService]::ContentService
# turn off remote administration security
$contentService.RemoteAdministratorAccessDenied = $false
$contentService.Update()
Set-RemoteAdministratorAccessDenied-False
Best regards
Dennis Guo
TechNet Community Support

In SharePoint 2013, some of the userswith contribute or full control rights are not able to edit and save office doucuments to SharePoint library.

In SharePoint 2013, Office 2010 and IE 8. Office web apps is not configured.
Some users with Contribute or full control are not able to edit and save documents back to SharePoint library.
When they try to save they are getting following error:
1. https://.....pptx is read-only. Do you want to save changes to a different file name?
2. Project canot access "https://...."
Try one of the following
The file may be temporarily open by another program. wait a momoment and try again.
A file with the same name may already exists. Save it with a different file name.
You may be trying to save to a read only folder. Save to a different folder instead.
Please help me with this issue.
will be waiting for any suggestions or solutions.
Thanks
Krish
99

Thanks again for quick response.
I have requested users who are having this issue to try check in/ check out, and share the results.
Result with CheckIn/CheckOut:
User was able to check out but no edit option.
'Edit Document' option under 'Files' tab was greyed out. I did check permissions every thing seems fine he has full control over the site and document library.
Please advise.
Thanks
Krish
99

Full Control User Cannot View Items in a List

Hi All,
User wants to view items on 2 lists (List A/List B)
I went ahead and inherited permissions the lists from the top level site.
Lists A and B say Manage Exceptions because all the items in the list are unique items.
After all permissions were inherited I gave both user "full control". I hopped on to their account, and navigated the site and found out that when I click View All Site Content, I see both lists and the item count next to each list (indicating
that there are items in List A/List B. When I click either list however, there are no items being displayed.
Seems to me it has a lot to do with the unique items. How do I make all the unique items inherit parent permissions. When I try to do it, it makes me edit each item one-by-one.

Hi,
Please firstly verify that the problematic user account has no sufficient permission on unique items. You could check item permission via Item’s “Share With” > Advanced > Check Permission:
If you need to grant permission on all items to a user group in bulk, here is an article about granting a specific permission level to a single group for all uniquely secured items in a list:
http://www.insource.com/sharing-with-sharepoint/
Best regards,
Sara Fan
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

"Sorry, you don't have access to this page" when creating a sub site. I am in the owners group with full control access

cannot provisioning a SharePoint 2013 site with full control access, I get the page with the "Sorry, you don’t have access to this page”. Any help will be greatly appreciated.

Hi,
Which template did you use for the parent site?
Please check whether the site collection administrator could create a subsite.
Please grant permissions on the Device Channels list
http://sitecollection_URL/DeviceChannels/AllItems.aspx -> List -> List Settings -> Permissions for this list -> granted Read rights for the Everyone group, compare the result as
it.
Please navigated to the hidden list "TaxonomyHiddenList" on the site collection i.e.
http://somdnetsp/lists/TaxonomyHiddenList/AllItems.aspx and check permissions on this list. Check whether the list has unique permissions and there were no users added to the list. If yes,
add "authenticated users" in the list permissions.
Then, try to create sub site, compare the result.
If this issue still exists, please check the log file to find whether there are some message about this issue.
Best Regards,
Wendy
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback
for TechNet Subscriber Support, contact [email protected]
Wendy Li
TechNet Community Support

Sharepoint 2010 Permission level Full Control and explicit deny

I am facing a very frustating permission level issue with Sharepoint 2010. First, everything worked as expected up to few days ago.
I have a user on my sharepoint 2010 env (publishing portal) named rjo who is site collection administrator and has also Full Control permission level.
When I execute the Check Permission command from the ribbon I get the following:
Permission levels given to xxxx\rjo
Full Control
Given through the "xxx Owners" group.
The following factors also affect the level of access for xxx\rjo (xxx\rjo)
Deny
Manage Permissions
Create and change permission levels on the Web site and assign permissions to users and groups.
Deny
Create Subsites
Create subsites such as team sites, Meeting Workspace sites, and Document Workspace sites.
etc.. Seems like all the individual permissions are set to deny.
If I remove the user rjo from the Full Control permission level, all the deny permissions disappear. I have tried creating a brand new permission level with Allow permission on al items but I still get the deny when I check the permissions. Notice that this
happens for all the users.
Does anyone experienced a similar issue? I suspect some kind of Windows update to have messed up the permissions but I cannot find a way to get proper permissions to my users.

I had a similar issue. When checking user permissions on any member of the site collection Owners group, the results were similar to those posted above. Also noticed that some buttons on the ribbon were missing. Also found that no user
could add content to Library. The Add button was missing. Issue was only happening on one site collection in the web application, so it was not a Web App Policy issue.
Eventually discovered that the site collection was locked as read-only.
Central Administration > Application Management > Configure Quotas and Locks
change the web application and site collection as needed to view setting for the affected site collection
Found lock set to 'Read-only' Changed to 'Not Locked'

Permissions on control directory startup error

Messaging Server is exiting with the following error:
Startup Problem:, The permissions on directory
f:/suitespot/MailServer/spool/control are incorrect.,
Netscape Messaging Server Exiting! What is going on?

To fix this check the directory permissions for your spool
directory. They should have, at a minimum, full control access to
the spool directory and all the subdirectories for the account that
you are running the server as (NetscapeMTA by default). Make sure
that the directories exist and have those privelages.

The directories should be: 
spool\control 
spool\messages 
spool\deferred 
spool\log 
spool\config 

Do the following and post the results:
cd $ORACLE_BASE
pwd
ls -al
cd jre
pwd
ls -al
cd 1.18
pwd
ls -alI can't imagine anyone making recommendations without seeing what you've done.

Does OS installed through boot camp or in virtual machine has access and full control of the peripherals like native OS X Lion?

I am planning to buy new PC for my faculty needs and this time I am thinking to buy Apple laptop like Mac book Pro 13" or so ( I owe already IPhone and Ipad 2)
To make final decision I need few information . These are:
1. May I use Boot Camp or similar utility software to install Windows 7 OS next to OS X Lion, or use some kind of virtual box software to create virtual machines with diverse guest OS in them like Windows , Linux etc.?
2. Does OS installed through Boot camp or in virtual machine has access and full control of the peripherals like native OS X Lion?
3. May I use the same disk partitions to access to the files regardless if I am using Windows 7 or OS X Lion operating system?
4. Is there full compatibility between Microsoft Office under OS X Lion and Windows 7 M. Office?
5. What is general user experience with OS X Lion operating system comparing to Windows 7?
Thanks for sharing your experience with me.
Adnan S

adnans wrote:
I am planning to buy new PC for my faculty needs and this time I am thinking to buy Apple laptop like Mac book Pro 13" or so ( I owe already IPhone and Ipad 2)
To make final decision I need few information . These are:
1. May I use Boot Camp or similar utility software to install Windows 7 OS next to OS X Lion, or use some kind of virtual box software to create virtual machines with diverse guest OS in them like Windows , Linux etc.?
2. Does OS installed through Boot camp or in virtual machine has access and full control of the peripherals like native OS X Lion?
3. May I use the same disk partitions to access to the files regardless if I am using Windows 7 or OS X Lion operating system?
4. Is there full compatibility between Microsoft Office under OS X Lion and Windows 7 M. Office?
5. What is general user experience with OS X Lion operating system comparing to Windows 7?
Thanks for sharing your experience with me.
Adnan S
1. Yes. You can install Windows 7 natively using Boot Camp Assistant or you can install Windows 7 in a virtual machine using Parallels, Fusion, or VirtualBox
2. If installed using Boot Camp Assistant Windows 7 uses all your computer's resources just as OSx does. If installed using a VM Windows 7 will share the computer's resources with OSx.
3. A Boot Camp partition is separate from the OSx partition. The VMs allow sharing of files across partitions since both OS are running at the same time.
4. No, not 100%.
5. Too broad a question. Be specific about what feature you are asking about or search the Internet for comparisons. I use both and find they both work well.

Permission changes from Full-control to Write

I am creating reports using Oracles Enterprise Planning and Budgeting software. Recently a majority of the reports that I have created have changed my permission status from "Full-control" to "Write". Unfortunately, I have no way of changing my permission status back to "full-control". I need to have "full-control" to allow other users "write or read" permission and to let other users publish the reports.

Hi,
Where I am with a DSL service which is limited by the distance I am from the exchange I get 7Mbs download and about 780kbps upload.
Your Upload is close to 300kbps and looks a bit low in comparison to your Download.
Are or were there any other items that might have been uploading at the same time ?
Games Consoles or other computers for instance.
The 290-300kbps is still good enough for 1-1 Video chats
Apple states you should have 384kbps to act as Host in a 4 way Video Chat (It can be done with less but issues creep in)
Try running a Chat with the Connection Doctor Open (Video Menu)
This will state the running Bit rate for both you and your Buddy (how much Messages is using rather than how much speed there is available).
This way you may see blips in the service.
Some ISPs cannot tell the difference between Peer to Peer Video Chat and Peer to Peer File Sharing.
As a result some take positive action against File Sharing by slowing your or your Buddies service to make File Sharing impractical. This can impact on Video Chat in iChat and Messages.
8:21 PM Saturday; November 3, 2012
Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
 iMac 2.5Ghz 5i 2011 (Mountain Lion 10.8.2)
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb (Snow Leopard 10.6.8)
 Mac OS X (10.6.8),
 Couple of iPhones and an iPad
"Limit the Logs to the Bits above Binary Images."  No, Seriously

System Folder errors after I changed all permissions on HD to read & write

Hi,
Two things may have caused probs on my new 2010 iMac (Snow Leopard), and Applecare is shut so I would really appreciate some help as I have urgent work.
1) INCORRECT PERMISSIONS
I have been stupid. I clicked on Macintosh HD and changed all permissions to read & write because I wanted to be sure I could open and edit all documents on other computers.
I ran Disk Utility Repair Permissions from the install disc, but I am still getting system error messages, and my HP printer won't work.
The first message, in Repair Permissions, said: Warning: SUID file System/Library/Cores has been modified and will not be repaired. I have read a support doc on this which says no need to worry but I don't like it and would like to fix this.
More importantly, my HP printer won't work, displays error beside the document in print dialogue box.
Deleting the printer and readding it didn't work, so I downloaded new drivers and tried to install them, which is when I got the second system error message: System extension System/Library/Extensions/BJUSBLoad.kext was installed improperly and cannot be used. Please try reinstalling it or contact product's vendor for an update.
I checked the permissions on the file and they were still wrong despite Repair Permissions, allowing everyone to read & write. So I have now clicked on the entire System folder and changed the permissions to: System read & write, admin read only, everyone read only.
Will this fix it or do I need to do something else, such as check ownership, to make sure all permissions on the computer are now correct?
2) MEMORY STICK SHUT DOWN MY IMAC
Additionally (though I don't think this had anything to do with my problems), I inserted a Sandisk USB memory stick the other day and it immediately shut down the computer. When I inserted it into my Macbook it initially rejected it and gave me a message saying the device wanted too much power so it had ejected it to prevent damage to my computer. When I tried again it was OK. I totally reformatted the stick in case there was something harmful on it, but should I now bin the stick as faulty? Scared to use it again.
3) IS IT BEST TO REINSTALL ENTIRE SOFTWARE?
If I do a reinstall of all the software from the install disc, will it wipe out all my data, such as Mail, documents, bookmarks and other apps?
I would back-up, but if I try and back up files on my external drive it will automatically do a Time Machine back-up and I don't want to do that in case it backs-up all the corrupted files. Otherwise, I wouldn't mind starting again just to be sure all is well.
Expert advice would be very much appreciated.
Thank you
Sarah

Oh, silly really. I was in a hurry and working on docs that I needed to take to the office and open on another computer there.
But when I checked the permissions on the doc it said I could read & write but everyone else was read only.
I thought if I opened it on another machine I'd be stuck with read only access and not be able to work on there. I think I couldn't change it, so I thought to avoid any future problems like that I would change everything on machine!
Yikes. Won't do that again
Sarah

?I am getting an error when installing on my dell inspiron with latest updates for drivers. Error 1406. I have the problem with Scan Snap software and a full version of reader.

?I am getting an error when installing on my dell inspiron with latest updates for drivers. Error 1406. I have the problem with Scan Snap software and a full version of reader.

Error 1402 | Error 1406 | Acrobat, Reader

Is there any way to get full control of my photos on my new ipad?

Love the screen on the new ipad but I'm as frustrated as ever with Apple not letting me control my photos on my ipad, making their 'post pc' claims completely false in my opinion.
Firstly, new photos I take on my iphone I can only get onto my ipad albums by photo stream which is a compressed image, so I have to still connect to my pc and do it that way. Is there any way around this?
Secondly, any photos from previous albums on my computer added to my ipad via itunes, are fixed - I can't delete or move photos around. I know if you connect a camera to an ipad it imports the photos and gives you full control of them. Is there any viable workaround to get the ipad to treat all my old photos (in albums by folder) as new photos, ie full control to delete, move around in albums etc without creating duplicates?
New iPad - now frustrating in HD!

Submit your feedback directly to Apple:
http://www.apple.com/feedback

When I go to duplicate a presentation I get the following error: Unsaved Keynote Document. Autosave couldn't be moved because you don't have permission to access AutoSave Information? My permissions are set at read

When I go to duplicate a presentation I get the following error: Unsaved Keynote Document. Autosave couldn't be moved because you don't have permission to access AutoSave Information? My permissions are set at read & write.

I noticed that I have three different log in accounts on my computer, much to my surprise. Could that be causing this problem?
That's unlikely. You would have had to save a document into another user's account and be trying to work on it - directly from their account.
"“Unsaved Pages Document.pages” couldn’t be moved because you don’t have permission to access “Autosave Information”.
Have you checked the permissions on your Autosave Information folder? Here are mine.

KM repository permissions: Full Control vs. Read

Similar Messages

Maybe you are looking for