Permissions for SPS are different for Office 2k3 and IE?

[ouzojd]

My problem is that under topics I have a number of subareas. One of the subareas has passwords in it so I have removed access to it except for the domain admins group. Now all the users can still navigate through the rest of the areas and cant see the passwords area which is good, however when using an office application and navigating to

http://sitename

they can see the top level of topics but cant expand it to save documents to other areas.

Alternatively I can make it so they can't get into the passwords area from sharepoint but can see it listed under topics but then they can open the password list from an office application.

Any ideas because I can set permissions on the document library that has the passwords, the only options under General Settings are:

Change general settings
Save document library as template
Delete this document library
Select a portal area for this document library

 

[Beowulf005]

Not quite understanding what you are trying to accomplish. It looks like you have a list that contain information that you don't want other users to be able to view on the sharepoint site. But want the users to have access to other areas of the site.

Is this correct?

When fustrated remember, In the computer world there is allmost always a backdoor.

 

[ouzojd]

sorry if it was confusing, it always make sense in my head.

OK, I have all users added to the Portal as readers except Domain Admins who are administrators of the portal.

Under Topics I have 10 areas.
All users can browse 9 of these areas and their document libraries in Internet Explorer.
For 2 of these areas I have given 3 users Read/Write access the rest still have read.
For 1 area (the one with passwords) I have removed all permissions for everyone except Domain Admins.

With this setup Domain Admins can see everything - read write in Internet Explorer.

The 3 'special users' can see everything except the password area (they cant even see that it is there). They only have read/write to 2 areas.

Everyone else can see everything in Internet Explorer except passwords.

But.. always a but. If a normal user or one of the special 3 users opens Word clicks file open or save as they can type

http://sitename

in the filename box press enter and get to Portal, from there they can see topics with a + sign next to it but it doesnt expand, this stops the 3 special users from saving to an area they are allowed to.

If I give everyone view area permissions on the password area, they cant enter into it using Internet Explorer which is good.

They can now in Word as described above click on the plus sign next to topics and expand it and browse to all its subareas which is good, but they can also browse to the password area which is bad.

I know all the functionality is available by browsing the portal, but it is more for if they want to save an email attachment or something. I dont think they would be happy about having to save it locally and then upload it. (I am just setting up sharepoint - not in use yet)

 

[ouzojd]

I think maybe that was confusing as well. Basically I want access restricted to one area without losing the functionality office apps have of selecting save as and browsing the portal structure. But I dont want them to be able to see areas they have been restricted from with this functionality.

 

[Beowulf005]

I would create a sub-site to store "the passwords"
When creating select "use unique permissions"

Then all users will not even be able to view the site for they will not even have guest permissions.

HTL
Brian

When fustrated remember, In the computer world there is allmost always a backdoor.

 

[ouzojd]

Thanks, I think I'll just go down the track of them having to do everything from Sharepoint, I saw your post in the Win 2003 server forum where someone had a problem of user deleting stuff they shouldnt of in Word.

Might be a more secure option to keep the General population away from it.

The structure I've being asked to implement is basically all documentation under the main portal with comittee & dept specific stuff like contacts, tasks, meetings etc under their own sites. A lot of debate going on about where things should go and if I was to make an exception for IT I think we would have World War 3 here.

Thanks again.

 

[Beowulf005]

The company I work for implemted sharepoint about a year ago and it grew very fast. And what we are doing now it creating a central committee and documention process for the portals. (Too many people create stuff on their sites and another did the same on another site)

Now each department or group can have their own site, but before they do they must request the site. The request asks
What the site will be used for
Who will have access
Who will be web disginers
Who will be admin
What content will be on the site
...I think you get the idea

Then the committee will review the request and approve the site or not, and sometime not all of the request will be approved. For many times the stuff they want to add is information from another department best suited for their site. If the requester still wants it on theirs then we create a linked view of the correct site.

Example many of the departments want to have the employee eval form on their site. So we created a central form Libary then gave each site a listing.

GL

When fustrated remember, In the computer world there is allmost always a backdoor.

 

[ouzojd]

Cheers, I had similar thoughts on some type of process after the initial rollout.

 

[Beowulf005]

Best to have the policy before otherwise you could have alot of cleanup. or maybe rollout the site to get the users interested in it(with no site creation permissions) then start the policy.

We started with about 9 departments with portals but now we have 9 departments and about 30 team sites with some of those have sub team sites, and one some of the subteam sites are access by personal who do not have access to the site the sub is in. Sign...We have alot of reorgizanal to do.

When fustrated remember, In the computer world there is allmost always a backdoor.

 

[ouzojd]

I think I should be right, only about 60 people here. None can create sites, or areas or change permissions. We've had meetings with the Exec and we are doing the initial setup of everything. Once it all settles down and everyone is happy we will hand control of the sites over to each dept / committee head. The areas containing all the documentation can only be updated by a very select few as most people in our company are cust service and really just need to look up information not update or create anything. They do have there personal sites for whatever they do create but stuff for everyone is only done and approved a select few. Not many like change here, but I think if things are easier to find than they are now, they will hopefully like it.