URGENT HELP NEEDED!!! MAJOR SECURITY BREACH!! 1

[programerrusuk]

How do you stop certain users accessing a subsite? When we delete the group it will still allow the members to access the ffirst page. They cannot edit items but we do not want them to even view the page. Please help!!!!!!!!!

 

[ouzojd]

I would start with IIS. I'm not sure exactly what you mean by subsite I'm pretty new to sharepoint but if there is a security issue shut the site down in IIS by right clicking the site and selecting stop, it will probably be your default website.

 

[Thomas2000]

Hello,

Also check if you have ineherited permissions from the "Parent" site. Also check in IIS and in SharePoint if you have enabled anonymous accesse to any of the sites or any certain parts of the site.

Regards,
Thomas

 

[dlongnecker]

Programmerusuk-

If you have all default/authenticated users as "readers" in your site, the easiest way might be to add these certain users to the site and explicitly deny them access (add them and do not check anything). It should force a login prompt when they hit the page.

I'll verify this when I get into the office and update this post. (^_~)

Regards,

David

---
David R. Longnecker
Web Developer
CCNA, MCSA, Network+, A+
Management Information Services
Wichita Public Schools, USD 259

 

[dlongnecker]

Update:

No... not sure what I was thinking that you could deny someone... shouldn't comment while not being infront of a machine. Perhaps, as Thomas said, make sure you have anonymous and authenticated users turned off and then specifically add those users who need to access it.

Good point though--is there no way to specifically deny a group in SPS?

Regards,

David

---
David R. Longnecker
Web Developer
CCNA, MCSA, Network+, A+
Management Information Services
Wichita Public Schools, USD 259

 

[philhege]

Nope. You have to manage denials by omission, that is, making sure the users to be blocked are not a member of any group that has access to the objects in question. That's currently outside the capability of the SPS admin interface.

Phil Hegedusich
Senior Programmer/Analyst
IIMAK

http://www.iimak.com

-----------
I'm not as think as you confused I am.
-----------
Flabbergasted (a.): Amazed at how much weight one has gained.
-----------
Oyster (n.): One who sprinkles their conversation with Yiddish expressions.

 

[programerrusuk]

Thanks for all posts,
I have found this to, sharepoint wont let you uncheck view pages (begs the question why they put it there). Even if they dont have a group on the site it lets them through