Tony Rockwell – Info

sharepoinTony@info – Cloud Computing adventures

Archive for February, 2009

Document Library Permissions

Posted by sharepoinTony on February 26, 2009

This is a true story where the names where changed to protect the innocent. That doesn’t make it a valuable story. I will let you decide what makes it valuable to you, I already got my value out of it.

The Beginning
A site owner went to their SharePoint Site Collection Administrator (SCA) with a problem. The owner had multiple document libraries and had created multiple folders in each library. She set permissions on each library and on each folder in each library by ‘breaking’ inheritance from the site and granting permissions to individuals and groups appropriately.

The site owner granted Read permissions to a specific user on each of the libraries. She also gave that user Read permissions to several specific folders within each of the libraries.

[Before anyone gets excited, you should know this department handles personnel files, awards & bonuses, reviews, new positions, etc. In this environment it is appropriate to create this structure because it allows staff to maintain all of these documents in one general area while also allowing segregation of information and the application of proper security for various people with varying needs.]

The Problem
The user with Read permissions reported that he could see all of the libraries and the folders he expected to see, but could not see the files in several of the folders. He could see the files in one folder in one of the document libraries.

The Questioning
The SCA verified what the user could see and not see specifically. Learned that the user could see everything that was expected, based on permissions, in the one library. He also learned that this user could browse through the site to the other libraries and see the appropriate folders in each. The user appeared to be ‘in’ a folder with a message saying there were “no items to display” just as when you navigate into a folder with no files.

The First Attack
The SCA checked the permissions at the Document Library and Folder levels. He checked the files within the libraries folders to see that the user in question did in fact have Read permissions within the folders. After checking and comparing the permissions between the library where the user could see the files with those “that didn’t work”, he went up a level and checked permissions for the site.

Everything seemed correct.

The Second Attack
The site owner said she had only added this user at the Library and Folder level, maybe the ‘auto-addition’ of the user at the site level was somehow corrupting something. (When you add a user to a Document Library that did not previously have access to the site housing the library, that user gets “Limited Access” permissions set on the site). Maybe we just need to start fresh. Yeah, let’s just remove all of this users permissions and try again very methodically and carefully. That didn’t improve anything.

The Third Attack
Maybe a test is called for. This is a permissions problem isn’t it? The SCA found a user who did not have access to any of these libraries, who could be temporarily trusted to see the files contained there. Adding this new user with Read permissions, exactly as had been done with the ‘problem user’ would be a good test. If the new user could see the files as expected then there must be something outside of the application of permissions causing this behavior. If the behavior was the same, then we swear quietly and dig in further.

Swearing Completed
So the same exact behavior befell the new user. What is missing…hmm, lets look at all of the settings for these Libraries. So the SCA set about to systematically look at every setting in the “good” Document Library and catalog the ‘notable’ items. Moving on to the other Libraries and comparing the settings he finds one significant difference. Versioning is turned on for the Libraries where the user cannot see the files as expected.

Hmm, let’s see what happens if we check that little radio button that tells us it will allow anyone with Read access to see Draft documents. Whattayaknow, the test user can suddenly see those files.

The Learning
When Versioning is on, your uploaded files are considered Drafts until you either Approve them if approvals are enabled, or Publish a Major Version. All of the files were uploaded and left as Drafts. Clicking the helpful link to “Learn more” about drafts will provide a very helpful explanation of how the process works and the impact on permissions.

Drafts are not visible to people with Read permissions, only to those with Contribute or Edit permissions for that Document Library/Folder/File.

This makes sense. If you are working on a document you probably don’t want everyone to see it while it is a draft. Once you are ready you make it available to the viewing public (Readers) by publishing it. Handy, if you know that is how it works. Neither our site owner or SCA knew of this feature, but they do now.

The wrap-up consisted of determining a) if versioning really was needed or not and b) if versioning was going to be used, then did they want Readers to see Drafts or would they learn to publish a major version and turn off the option selected during the test.  If versioning wasn’t truly needed, then simply turning off versioning would solve the problem.


Posted in Document Library, Permissions, SharePoint 2007 | Tagged: , | Leave a Comment »

Ideas for SharePoint Admin documentation/notes

Posted by sharepoinTony on February 13, 2009

I have been trying to determine what method “I LIKE” best for capturing documentation and administration notes.  If anyone out there actually reads this and has ideas, please comment on this topic – I would really like to hear what you do.

My requirements are simple enough: use SharePoint, make it quick and easy for me to document things, make it easy to FIND what I documented or those notes about that widget from 6 months ago, and not cost more than my own effort in setting it up.  The last requirement could change, but this is the list I started with.

So far I have tried setting up a Knowledge Base, a Wiki and a Blog.

Of those I thought I would like the KB because I could easily find Related Articles.  But I found that I didn’t like the way Keywords are used and I couldn’t create a view to sort or group by keyword.  The Wiki became my next effort.  It addresses all of my requirements except ‘easy to find’ due to the lack of keywords, categories, or something to group similar or related content.  My last move was to the blog.  The Categories function better than Keywords found in the KB, but the lack of a “Related Articles ” capability detracts from my mission.  I suppose I can create a specific crawl that may help find things for any one of these options.   Before I put in the effort I thought I would see if anyone else is doing something I like, because that is what best practices is all about.

Posted in Commentary, SharePoint 2007 | Tagged: , | 5 Comments »

SharePoint Governance

Posted by sharepoinTony on February 10, 2009

I am likely to write several blogs on this topic, bear with me.  The reason is simple, I am engaged in this topic daily.  Now on to some thoughts.

I recently read an article by Eric Landry which sparked some thought on this topic.  Eric does a great job outlining some critical factors in “achieving and sustaining” a SharePoint environment.

However, I wonder how many senior executives will change THEIR habits and actively sit on a steering committee.  How many will engage with and support subordinates tasked with developing the corporate governance model?  Remain engaged to support and enforce the governance model?  And how many will stick with the SharePoint implementation through arguments and dissenters who don’t want to change or are afraid of change?

If the answer is anything other than “every one of them” your SharePoint success will be limited at best.

I wonder how many of Mr. Landry’s readers can reply with that answer to my questions.  My cynical side cries out ‘not many’, but my pure-of-heart SharePoint side prays for answers of ‘most’.  I want SharePoint to succeed.  I have seen many technologies and initiatives go by the wayside not because they had faults beyond their benefits, but because ‘corporate America’ refused to engage fully.

Executives have busy schedules.  Executives are paid big bucks for their decisions.  Executives are not known for their willingness to change their own behavior.  Nor are they generally open to embrace something completely that they aren’t fully certain will result in success.  Selling executives on SharePoint, teaching SharePoint to executives, and painting a picture that allows executives to believe in SharePoint is what is needed.  Exactly how that is done in your environment I can’t say, but I thank Eric Landry for supplying us with one excellent weapon to use in this battle.

Posted in Governance, SharePoint 2007 | Tagged: , , | 1 Comment »

Filtering blank in a SharePoint View

Posted by sharepoinTony on February 8, 2009

Recently I had a request to create a view on a list within SharePoint where the desired filter needed to be based on a column containing nothing.  It took a few minutes of thought and the user couldn’t figure out how to do it at all.  This may not be the only way, but here is one way to accomplish this Filter task in a View: Read the rest of this entry »

Posted in Filter, SharePoint Links, Views | Tagged: | 1 Comment »

Starting a new Blog

Posted by sharepoinTony on February 7, 2009

I haven’t blogged publicly before, so this is new for me. Be patient and who knows I may spew out something worthwhile.

Posted in Commentary, Uncategorized | Leave a Comment »