Peter Alderton 
Australia
Member since
10/21/2007
Registered Users
Posts: 10
 |
| 7/04/2008 02:25 AM |
|
Hi
I guess my previous post wasnt clear enough.
I have a companyweb site set up however testing has revealed that users with read only access are able to change site settings etc. Can someone help me set this up correctly? I have double checked the permissions for those with read only access but cant see what additonal seetings I need to alter.
Thanks
Peter
|
|
|
|
|
|
Stan Guinn
Texas, USA
Member since
12/29/2005
Platinum Membership
Posts: 1843
|
| 7/04/2008 02:35 AM |
|
| Where did you set the permissions up at? In the companyweb site or in Sharepoint Central Administration |
|
|
|
|
|
Peter Alderton
Australia
Member since
10/21/2007
Registered Users
Posts: 10
|
| 7/05/2008 03:35 AM |
|
Thanks for your response Stan
I set it up in companyweb. By the sound of your question I should be looking in sharepoint central admin. Correct?
Thanks
Peter
|
|
|
|
|
|
Stan Guinn
Texas, USA
Member since
12/29/2005
Platinum Membership
Posts: 1843
|
| 7/05/2008 05:38 AM |
|
Well, permissions in SharePoint can be inherited just like NTFS file permissions can. When permissions in SharePoint are not working as expected the usual culprits are either an inherited permission that is over riding the one you are trying to set, or the user has domain admin privileges. And that over rides SharePoint permissions.
So back to the issue. I would start at the top, in SharePoint Administration and try to adjust permissions there first.
|
|
|
|
|
|
Peter Alderton
Australia
Member since
10/21/2007
Registered Users
Posts: 10
|
| 7/07/2008 02:47 AM |
|
Ok. I have been to Top Level Site Administration, Manage site groups and edited the site group "reader" Only those permissions allowing view access are ticked. I have also been to edit site group membership for the test user and ensured that they are set as "reader".
So far, no change. ie. they can still change site settings.
I'll check the user proveliges on the network next but I'm pretty sure they are at a basic level.
Peter
|
|
|
|
|
|
Marina Roos
The Netherlands
Member since
3/24/2005
Forum Admins
Posts: 12282
|
|
Peter Alderton
Australia
Member since
10/21/2007
Registered Users
Posts: 10
|
| 7/08/2008 10:35 AM |
|
Hi Marina
I didn't use the wizard originally but have now set one up using it and am still able to access site settings etc.. I am testing with one user. The user is a member of Domain Users, Mobile Users, Remote operators, Remote web workplace, Distribution Group, SQLserver, users.
Thanks for your help
Peter
|
|
|
|
|
|
Peter Alderton
Australia
Member since
10/21/2007
Registered Users
Posts: 10
|
| 7/17/2008 07:17 AM |
|
| Hello?? Anyone willing to help? |
|
|
|
|
|
Marina Roos
The Netherlands
Member since
3/24/2005
Forum Admins
Posts: 12282
|
| 7/19/2008 07:47 PM |
|
Hi Peter,
Users should never ever be a member of the Remote Operators group. Please remove them from that group, as that might well be source of your problem too. I also wouldn't know a valid reason why they should be a member the SQLServer group. Looks to me that the member ships in general are pretty messed up.
|
|
| Marina Roos Smallbizserver.Net Administrator | Mission accomplished. We have joined the branch office to our SBS 2003 Headquarters and have the same user experience on the branch office as we have on our local network at the Headquarters. Want to know how? Signup up for a subscription and get instant access to the article series 'How to add an additional Domain Controller from a remote office to the SBS domain' |
|
|
|
|
Peter Alderton
Australia
Member since
10/21/2007
Registered Users
Posts: 10
|
| 7/21/2008 02:38 AM |
|
Thanks again Marina
I've now removed membership to all groups except Domain Users and Remote web workplace users. I tested the following:
Site settings
Manage Users - Unable to access
Manage sites and workspaces - Able to access and alter
Site and workspace creation - Unable to access
Top level site admin - Able to access and Alter
Customization - Able to access and Alter
Manage My Information - Able to access and Alter
We are a Volunteer rescue organisation. We have approximately 100 members of which about 5 may access the companyweb remotely at any time. I have set up 5 generic users in addition to the commander, treasurer etc etc to allow members of the five groups to access RWW for view access only.
Any more suggestions?
Thanks
Peter |
|
|
|
|
|
Marina Roos
The Netherlands
Member since
3/24/2005
Forum Admins
Posts: 12282
|
|
Peter Alderton
Australia
Member since
10/21/2007
Registered Users
Posts: 10
|
| 7/29/2008 12:17 PM |
|
Thanks Marina that did the trick. Really appreciate you help
Peter 
|
|
|
|
|
|