Re: Sharepoint - Security Logistics Nightmare?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Darrin Bishop (dbXishYopZ_at_lrs.ReplaceWithCom)
Date: 02/23/05 

Date: Wed, 23 Feb 2005 12:27:39 -0600

I dont think there is a really good answer. It is a pain to have to
maintain so many libraries to deal with the different security issues but
there is no item level security - security for a doc lib is at the doc lib
level. There are various ways around this but they all generally involve
custom programming. An example would be using InfoPath and Web Services.
Create the invoice as an infopath doc, create a Web Service to access the
infopath doc info (XML) using an account that can access the data. the
InfoPath app would connect to the doc using the web service under the guise
of the special acccount. The logic as to who gets to open the doc is baked
into the web service code. If you dont belong there , dont return the data.

Just one idea out of many.

"Joseph Geretz" <jgeretz@nospam.com> wrote in message
news:e$qqqZcGFHA.1096@tk2msftngp13.phx.gbl...
>I have my own Sharepoint site within our company portal. I keep my private
>documents on this site. No one else in the company can view my private
>documents.
>
> I'd like to publish my monthly invoices to the Divisions|Human
> Resources|Joseph Geretz area. I can publish the link easily, However the
> HR administrator can't pull up the document since she doesn't have access
> to my private documents list.
>
> Can't I change the security on a single document? It doesn't seem so. This
> means that in order to share documents between various sets of users, I
> need to first establish a site with the appropriate user permissions for
> every subset of users to whom I wish to publish. This will be a nightmare!
> This can't be right. I must using the wrong approach.
>
> Here's my concrete scenario: I lead a team of 4 developers. My scenario
> involves three classifications of documents; Invoices, Vacation Sheets and
> All other Developer Documents.
>
> Invoices should be private between each developer and HR.
> Vacation Sheets should be private between each developer and me.
> All other documents in the developers' sites should be private to the
> developer only.
>
> What's the best way to set this up?
>
> Thanks for your help.
>
> Joe Geretz
>

Relevant Pages

  • Re: Sharepoint - Security Logistics Nightmare?
    ... So, if I understand this correctly, Sharepoint is more useful for its ... scenarios which impose complex security requirements dictating that many ... No one else in the company can view my private ... >> Invoices should be private between each developer and HR. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Inherited Readonly Members
    ... > but we do a lot of inheriting within our own frameworks and too often ... Too often things that are private should be protected ... If you dont intend your class to be inherited from, ... >> the developer, classes can be versioned more easily because a field ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: For Tex, (Listening & Watching)
    ... "No Place to Hide might just do for privacy protection what Rachel ... We live in an ever more convenient society. ... O'Harrow unveils a modern world riddled with seemingly innocuous private ... Department of Homeland Security aggressively sought access to these ...
    (rec.arts.poems)
  • For Tex, (Listening & Watching)
    ... "No Place to Hide might just do for privacy protection what Rachel ... We live in an ever more convenient society. ... O'Harrow unveils a modern world riddled with seemingly innocuous private ... Department of Homeland Security aggressively sought access to these ...
    (rec.arts.poems)
  • Ind: The world of private security: Unleashed: the fat cats of war
    ... The US is finally facing up to its failures to supervise the private armies ... The killings by Blackwater's private security guards on Baghdad's Bloody ... yesterday resigned as the State Department overseer of security contractors. ... The government of Nouri al-Maliki, which had declared that they would expel ...
    (alt.politics.bush)