Tag: Security

How to set view level permissions out of the box in SharePoint 2010

Today I’d a requirement to set permissions on list view, I remembered this feature was present in SharePoint 2007 but I couldn’t find it in SharePoint 2010. After doing a bit of research, I found out a way to do this out of the box.

I’ll be using the default Task list for illustrative purposes. However this method can be used on any list or document library.

Let’s say for example we want to create a view in task list to show users the tasks which are assigned to them and their manager should be able to view all tasks. So users should only be able to access my tasks view and only their managers can access all tasks view.

Step 1: Create a document library. I’m naming it Restricted views. It is better to not show this library in quick launch because it’ll be used to host the all tasks view.

Creating restricted views document library

 

Step 2: Now open SharePoint Designer 2010, go to All Files – Lists – Tasks and copy AllItems.aspx (This is All Items view)

Default views in SharePoint 2010 task list

 

Step 3: Go to All Files – Restricted Views (It is the document library which we created in step 1) and paste the AllItems.aspx there

Paste AllItems.aspx in Restricted views document library

 

Step 4: Go to All Files – Lists – Tasks and delete AllItems.aspx

Step 5: Open the SharePoint 2010 portal – Site Actions – View All Site Content – Restricted Views, you will see AllItems.aspx there.

Change item permissions in SharePoint 2010 Document Library

 

Step 6: Select AllItems.aspx – Document Permissions – Stop Inheriting Permissions and then grant permissions to manager.

Step 7: Go back to SharePoint Designer 2010, go to All Files – Lists – Tasks and then delete AllItems.aspx

Step 8: Go to All Files – Restricted Views, copy AllItems.aspx and paste it to All Files – Lists – Tasks.

Step 9: Open the SharePoint 2010 portal, go to Task List, when you click the views drop down, you’ll see two views titled All Items, don’t worry.

Changing list view in SharePoint 2010

 

Step 10: Go to list settings – views and click All Tasks views, now you’ve to be careful here and delete the old view

Deleting list view in SharePoint 2010

 

Make sure URL of the view says /Lists/Tasks/AllItems.aspx and not /Restricted Views/AllItems.aspx, this is important because the view in Restricted Views library is the one with proper permissions.

Step 11: Now trying accessing the view as manager, you’ll be to see it and when you’ll try to access the view using any user who you didn’t give, they’ll see access is denied when they’ll try to access it.

Access denied on SharePoint 2010 List view

 

I hope this will help you out. Thanks.

 

Advertisements

How to transfer responsibility of securing content to business users

Once you have created the site structure, responsibility of owning the content should be transferred to some users so they do not have to come to IT again and again and take away the burden of managing permissions.

To setup this in SharePoint 2010, go to site settings and then create a group, I’m naming it “Sales Reports Content Owners”, give this group Full control and then add members in this group who would own the content.

Secondly, create another group “Sales Reports Content Viewers” and specify the owner’s group name in the group owner field i.e. “Sales Report Content Owners” in our case and that’s it.

Once you’ve set this up, the members of the group specified as group owner will now be able to manage permissions.