3 thoughts on “What is Limited Access Anyway?”

1. Mike Gallagher January 19, 2008 at 4:42 pm

   Hi Paul,
   In our testing we’ve discovered an unfortunate consequence of adding "limited access" to the root site when unique permission are assigned to an item.

   You’d imagine that this permission would inherit in a linear manner – i.e. from the root down through the sub-site, doc lib, folder, to the item itself. However, in our tests, it seems that at the Doc library level, View permissions are granted horizontally.

   We have some team sites. If I have two doc libs – TestA and TestB – and I grant a user from outside the top-level group item-level access to a document within one of the libraries, he can also see the other libraries. They can’t view any documents within these libraries, but the fact that they can actually browse to them, is an unacceptable security breach for us. In fact, it seems to suggest that item-level security doesn’t really work in the strictest sense – i.e. you can manage at an item-level, but it also adds view permissions where you don’t want them.

   This is quite a big deal for us and we’re having no luck finding a solution. I’m hoping I’m missing something really obvious. 🙂

   Any ideas?

   Mike

   Reply ↓
2. Ajith George November 5, 2008 at 4:42 pm

   Hi paul,

                    Is it a must that a user added to a child site should have atleast some permissions on the top level site, if you say yes the is it a bug from sharepoint since for scenarios like 1000+ users newly adding to a child site the same process should be done for a top level site which will be a boring and hectic stuff. Wat do you say? 

   Reply ↓
3. Dessie Lunsford wrote: November 3, 2008 at 4:42 pm

   Paul,

   I like the definition (seems pretty straight-forward).

    

   Generally when I get into a discussion regarding this subject with one of my users, I tend to look at it like this:

    

   "Limited Access" refers to a user having more than one set of permissions within the same site, and is applied by the system itself to the user.  This occurs when part of the site (list or library, item or document) breaks the inheritance of permissions from its parent, resulting in a user either having lower or higher permissions in the part of the site that is no longer inheriting permissions.

    

   The way I normally describe it to my users is in the (literal) "Parent – Child" relationship (also helps to explain permission inheritance in itself).

    

   When a parent has a child, they live in the same house and the child must follow all the rules that the parent dictates (how many times have you heard the "As long as you live in my house, you’ll follow my rules!!" statement?).  When the child moves out, as a gift from their parents, they get a copy of the parents permissions (kind of like a "Starter Set" of rules to live by…assuming they’ve been raised well) and literally "Break Away" to live their own life (breaking inheritance).  They can always "move" back in later if needed (better be paying rent if so) and have to live by the parents rules once again (re-inheriting parent permissions), but on occasion, they get to work out a deal with the parents for "modified" rules ("As long as I’m paying rent, I can come and go as I please!!"), which may lead to the parents saying ("Fine…you can stay here, use our shower, sleep in your old room, but you need to buy your own food!), which leads to "Limited Access" on the fridge 🙂

    

   Not that all parents would do this (mine let me move back in after college with only having to pay rent), but it normally gets the idea across to new users when attempting to understand how permission inheritance works, and what "Limited Access" means.

    

   – Dessie

   Reply ↓