Security in SharePoint

I will start this out by saying I am fairly new at SharePoint, so forgive me
if this is obvious. I am trying to set up a site group so that members have
permission to view and reply to posts in a discussion but they do not have
permisison to create new topics in the discussion. I do not see a
permission setting to accomplish this while customizing the site group and
am not sure how to go about accomplishing this. I am skilled with
programming in .Net so if I need to modify some things it is no problem, but
I have no idea where to start or how big of a project this might be if it is
even possible.

Thanks for any suggestions,

Bob Dankert

lukezhan
Mon Aug 14 21:21:05 CDT 2006

------=_NextPart_0001_1E3E8582
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

Hello Bob,

As My understanding, you want to grant a site group with view and change
permission on a dicscussion list, but not with Insert.

To implement this, you may follow these steps:

1. Open the Discussion in WSS, and select Modify settings and columns in
the left panel
2. Select "Change permissions for this discussion board" in General Settings
3. Check your site group in the list and select "Edit Permissions of
Selected Users"
4. Click "Advanced permissions"
5. Check following options: "View List Items" and "Edit List Items" , click
OK
6. You will the Permissions for the site group has been set as Custom, and
expand it, you will the detailed Permissions

If there is any further questions, please feel free to let us know.

Sincerely,

Luke Zhang

Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.


------=_NextPart_0001_1E3E8582
Content-Type: text/x-rtf
Content-Transfer-Encoding: 7bit

{\rtf1\ansi\ansicpg936\deff0\deflang1033\deflangfe2052{\fonttbl{\f0\fnil\fprq2\fcharset0 MS Sans Serif;}}
\viewkind4\uc1\pard\lang2052\f0\fs20 Hello Bob,
\par
\par As My understanding, you want to grant a site group with view and change permission on a dicscussion list, but not with Insert.
\par
\par To implement this, you may follow these steps:
\par
\par 1. Open the Discussion in WSS, and select Modify settings and columns in the left panel
\par 2. Select "Change permissions for this discussion board" in General Settings
\par 3. Check your site group in the list and select "Edit Permissions of Selected Users"
\par 4. Click "Advanced permissions"
\par 5. Check following options: "View List Items" and "Edit List Items" , click OK
\par 6. You will the Permissions for the site group has been set as Custom, and expand it, you will the detailed Permissions
\par
\par If there is any further questions, please feel free to let us know.
\par
\par Sincerely,
\par
\par Luke Zhang
\par
\par Microsoft Online Community Support
\par ==================================================
\par Get notification to my posts through email? Please refer to http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notifications.
\par
\par Note: The MSDN Managed Newsgroup support offering is for non-urgent issues where an initial response from the community or a Microsoft Support Engineer within 1 business day is acceptable. Please note that each follow up response may take approximately 2 business days as the support professional working with you may need further investigation to reach the most efficient resolution. The offering is not appropriate for situations that require urgent, real-time or phone-based interactions or complex project analysis and dump analysis issues. Issues of this nature are best handled working with a dedicated Microsoft Support Engineer by contacting Microsoft Customer Support Services (CSS) at http://msdn.microsoft.com/subscriptions/support/default.aspx.
\par ==================================================
\par
\par This posting is provided "AS IS" with no warranties, and confers no rights.
\par
\par
\par
\par }
------=_NextPart_0001_1E3E8582--

Bob
Tue Aug 15 08:53:08 CDT 2006

Luke,

I set up the group as you described but it did not have the intended
function. When I give the user permission to view and edit items they can
not reply to items in the discussion. I am looking to make it so that users
can reply to discussion posts but can not create the discussion posts. I
fear that both reply and create new are both being considered part of the
'Add List Items' permission.

Given that the user has 'Edit List Items' currently but not 'Add List
Items', I am not sure that the Edit permission is doing any good since they
can only edit posts which they make and they are not able to make any posts
of any sort (reply or new).

Thanks!

Bob Dankert

"Luke Zhang [MSFT]" <lukezhan@online.microsoft.com> wrote in message
news:uT4B9FBwGHA.5864@TK2MSFTNGXA01.phx.gbl...
> Hello Bob,
>
> As My understanding, you want to grant a site group with view and change
> permission on a dicscussion list, but not with Insert.
>
> To implement this, you may follow these steps:
>
> 1. Open the Discussion in WSS, and select Modify settings and columns in
> the left panel
> 2. Select "Change permissions for this discussion board" in General
> Settings
> 3. Check your site group in the list and select "Edit Permissions of
> Selected Users"
> 4. Click "Advanced permissions"
> 5. Check following options: "View List Items" and "Edit List Items" ,
> click
> OK
> 6. You will the Permissions for the site group has been set as Custom, and
> expand it, you will the detailed Permissions
>
> If there is any further questions, please feel free to let us know.
>
> Sincerely,
>
> Luke Zhang
>
> Microsoft Online Community Support
> ==================================================
> Get notification to my posts through email? Please refer to
> http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
> ications.
>
> Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
> where an initial response from the community or a Microsoft Support
> Engineer within 1 business day is acceptable. Please note that each follow
> up response may take approximately 2 business days as the support
> professional working with you may need further investigation to reach the
> most efficient resolution. The offering is not appropriate for situations
> that require urgent, real-time or phone-based interactions or complex
> project analysis and dump analysis issues. Issues of this nature are best
> handled working with a dedicated Microsoft Support Engineer by contacting
> Microsoft Customer Support Services (CSS) at
> http://msdn.microsoft.com/subscriptions/support/default.aspx.
> ==================================================
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>

lukezhan
Wed Aug 16 01:04:58 CDT 2006

------=_NextPart_0001_2431E1BC
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

Hello Bob,

Thank you very much for the reply. I may misunderstand the actual issue in
my first message. When we want a user be able to reply a message in a
discussion list, he has to have "Insert" permission on this issue. In
current version of WSS, we cannot seperate the Reply permission and AddNew
permission.

Anyway, you may consider following implements to see if they can help a
little:

1. Set Item-level security on the discussion list, for example, set "Edit
access: Specify which items users can edit" to "Only their own". This
prevents users to modify other user's message.
2. Set "Content Approval" to true. In this way, after a user add a new
message or reply a meesage, the new message won't be added immediately
until an administrator. This also can prevent user post messages, but
requires more administration.

Above option can be found via: Open the discussion\Modify settings and
columns\Change permissions for this discussion board\Modify item-level
security

If you have any further question on above suggestions, please feel free to
let me know.

Sincerely,

Luke Zhang

Microsoft Online Community Support
This posting is provided "AS IS" with no warranties, and confers no rights.


------=_NextPart_0001_2431E1BC
Content-Type: text/x-rtf
Content-Transfer-Encoding: 7bit

{\rtf1\ansi\ansicpg936\deff0\deflang1033\deflangfe2052{\fonttbl{\f0\fnil\fprq2\fcharset0 MS Sans Serif;}}
\viewkind4\uc1\pard\lang2052\f0\fs20 Hello Bob,
\par
\par Thank you very much for the reply. I may misunderstand the actual issue in my first message. When we want a user be able to reply a message in a discussion list, he has to have "Insert" permission on this issue. In current version of WSS, we cannot seperate the Reply permission and AddNew permission.
\par
\par Anyway, you may consider following implements to see if they can help a little:
\par
\par 1. Set Item-level security on the discussion list, for example, set "Edit access: Specify which items users can edit" to "Only their own". This prevents users to modify other user's message.
\par 2. Set "Content Approval" to true. In this way, after a user add a new message or reply a meesage, the new message won't be added immediately until an administrator. This also can prevent user post messages, but requires more administration.
\par
\par Above option can be found via: Open the discussion\\Modify settings and columns\\Change permissions for this discussion board\\Modify item-level security
\par
\par If you have any further question on above suggestions, please feel free to let me know.
\par
\par Sincerely,
\par
\par Luke Zhang
\par
\par Microsoft Online Community Support
\par This posting is provided "AS IS" with no warranties, and confers no rights.
\par
\par
\par
\par }
------=_NextPart_0001_2431E1BC--